Free resources for network engineers.

You are here

Not sure where to begin? Find the stage that sounds like you and follow the trail. Each link jumps to the matching section of the catalog below, which is always there if you would rather browse by topic.

Learning paths and certifications

The certifications that move resumes and pay bands. Mix vendor and vendor-neutral. Pick one track, finish it, then expand.

• Cisco Learning Network (CCNA → CCIE)

  Official Cisco study community, exam guides, and certification roadmaps.

• Juniper Open Learning

  Free associate-level training and certifications (JNCIA tracks).

• Arista Academy (ACE)

  Arista's certification program (ACE) covering EOS, data center, campus, WAN, and automation. Self-paced training is paid (per-track or All-Access Pass). The free piece is Arista Academy Channels — listed under Free courses.

• Nokia Service Routing Certification

  Tracks for IP/MPLS service provider and data center networking.

• CompTIA Network+

  Vendor-neutral entry-level certification, widely accepted as a foundation.

• AWS Certified Advanced Networking

  Advanced cert for designing AWS networks and hybrid architectures.

• AWS Certified Solutions Architect — Associate

  Not networking-specific, but the cloud architecture cert that overlaps most with hybrid networking work and shows up on the most job listings.

• Azure Network Engineer Associate

  Microsoft's networking-focused Azure credential.

• Google Cloud Network Engineer

  GCP networking certification focused on VPCs, hybrid connectivity, and security.

• Wireshark Certified Network Analyst (WCNA)

  The recognized credential for packet analysis. If you live in pcaps, this one carries weight.

• Professor Messer Security+ Training

  Free video course covering the CompTIA Security+ objectives, a common entry point for engineers moving into security roles.

• NIST Cybersecurity Framework

  Vendor-neutral reference for how organizations identify, protect, detect, respond, and recover. Helps network engineers understand how security work is structured.

Free courses and labs

Practical, hands-on, free. Start with Kirk Byers if you've never written a line of Python.

• Kirk Byers — Python for Network Engineers

  Free 8-week email course. The single most recommended Python on-ramp for network engineers.

• Cisco DevNet Sandbox

  Free always-on labs for IOS XE, Nexus, Meraki, Webex, and more.

• Juniper vLabs

  Free reservation-based virtual labs for hands-on Junos practice.

• David Bombal (YouTube)

  Deep technical videos on networking, certifications, and network automation.

• Free CCNA — Jeremy's IT Lab

  A full free CCNA course on YouTube with practice questions.

• Nokia Network Developer Portal

  The free Nokia learning hub: SR OS material, hands-on SR Linux tutorials (the modern Nokia DC NOS), pySROS automation docs, and intro lab content. The closest equivalent to Cisco DevNet for Nokia gear.

• Arista Academy Channels

  Arista's free video deep-dives behind a no-cost registration. Most Arista Academy content is paid; this is the public corner you can actually use without a subscription.

• Stanford CS244 — Advanced Topics in Networking

  Graduate-level networking course with public materials. Datacenter networks, congestion control, SDN. For when you want to go beyond practitioner depth.

• MIT 6.829 — Computer Networks (OCW)

  Older but foundational graduate networking course. The protocol design and queuing-theory chapters still pay dividends.

• TryHackMe

  Browser-based security labs that start from the basics, useful for network engineers building hands-on offensive and defensive skills. The core learning paths have free rooms without payment.

Service provider and operator training

Free training for the carrier, ISP, and large-scale operator world: routing at scale, MPLS, segment routing, and the regional registry academies. This is where the internet's backbone is run.

• APNIC Academy

  The Asia-Pacific registry's free academy: self-paced routing, BGP, multihoming, and RPKI courses with hands-on labs. Operator-grade material behind a free account.

• RIPE NCC Academy

  Free, vendor-neutral e-learning from the European registry. IPv6, routing security, and BGP taught the way operators run them in production.

• NANOG Tutorials & Archive

  Decades of operator tutorials and meeting decks on BGP-at-scale, MPLS, segment routing, and peering, straight from the people running the networks. Deep archive at archive.nanog.org.

• segment-routing.net

  The Cisco-maintained community hub for SR-MPLS and SRv6: tutorials, demos, IETF drafts, and reference papers in one place, no paywall.

• Ubuntu-based ADHD/burnout resource: Tarsnap essay 'On the Care and Feeding of Engineers'

  A USENIX article on sustainable on-call and reducing operational toil, useful for engineers whose stress comes from paging and firefighting.

• Google SRE Book, chapter on Eliminating Toil

  Free online chapter that explains how repetitive manual work drains teams and how to cut it down, which helps prevent operational burnout.

• Google SRE Workbook, 'Being On-Call'

  Free chapter covering on-call load, healthy rotations, and psychological safety, aimed at engineers carrying pager duty.

Lab software and simulators

The platforms working engineers and students use to build realistic topologies on a laptop. Start with whichever you have local images for; the differences become preferences over time.

• Containerlab

  Container-based network labs defined in YAML. Spin up multi-vendor topologies in seconds. Where the modern lab community has been moving.

• GNS3

  The long-standing favorite for emulating Cisco / Juniper / Arista images. Heavier than Containerlab but battle-tested.

• EVE-NG

  Browser-accessible network emulator. Popular in study groups, supports a wide range of vendor images.

• Cisco Modeling Labs (CML) Free

  Cisco's official simulator. The free tier is enough to practice most CCNA / CCNP scenarios on real IOS XE / NX-OS images.

• Cisco Packet Tracer

  Lightweight Cisco simulator from Networking Academy. Great for first labs and quick what-ifs; not a substitute for CML when topology fidelity matters.

Foundational RFCs and standards

The Request for Comments (RFC) series is how the internet is specified. Every major protocol you touch has an RFC behind it. These are the ones every network engineer should be able to point to.

• RFC 791 — Internet Protocol (IPv4)

  The original IP specification, 1981.

• RFC 8200 — Internet Protocol, Version 6 (IPv6)

  Current IPv6 specification.

• RFC 9293 — Transmission Control Protocol (TCP)

  Modern consolidated TCP specification, supersedes RFC 793.

• RFC 768 — User Datagram Protocol (UDP)

  UDP, three pages, still in force after 45 years.

• RFC 4271 — Border Gateway Protocol 4 (BGP-4)

  The protocol that holds the internet together.

• RFC 2328 — OSPF Version 2

  OSPFv2, the most common interior gateway protocol in enterprise networks.

• RFC 7868 — Cisco's EIGRP

  Cisco's once-proprietary interior gateway protocol, published in the open in 2016. Read it after you've brought up a few adjacencies in the lab and want the authoritative behavior behind them.

• RFC 1918 — Address Allocation for Private Internets

  Where 10/8, 172.16/12, and 192.168/16 come from.

• RFC 5424 — The Syslog Protocol

  Standard for transmitting log messages across networks.

• RFC 1034 / 1035 — Domain Names

  Foundational DNS specification.

• RFC 8446 — Transport Layer Security (TLS) 1.3

  The current TLS specification. If you touch HTTPS, certificates, or load balancers, you should know what changed from 1.2.

• RFC 9113 — HTTP/2

  Consolidated HTTP/2 specification.

• RFC 9114 — HTTP/3

  HTTP over QUIC. The shape of the modern web from the network engineer's side.

• RFC 1925 — The Twelve Networking Truths

  Two pages, deeply funny, eerily true. Required reading at least once a year.

• RFC 5880: Bidirectional Forwarding Detection (BFD)

  Defines the protocol for fast detection of link and path failures between forwarding engines. Worth reading if you rely on BFD to catch outages quickly in production.

• RFC 9315: Intent-Based Networking - Concepts and Definitions

  An IRTF document that defines intent-based networking terms and concepts, useful for understanding where automation and AI-driven intent fit in network operations.

Git and GitHub

Version control is the on-ramp to network automation. Before you push configs from code, get comfortable with Git and the GitHub workflow. Start with GitHub Skills and keep Pro Git nearby.

• GitHub Skills

  Free interactive courses that run inside real repos with automated feedback. The fastest way to learn the GitHub workflow by doing instead of reading.

• Introduction to GitHub

  The under-an-hour starter exercise: repos, branches, commits, and pull requests. The right first stop if you have only ever lived in config backups.

• GitHub Docs: Get Started

  The official, always-current reference for everything from your first commit to SSH keys and pull requests.

• GitHub Foundations (Microsoft Learn)

  A free two-part learning path that maps to the GitHub Foundations certification. Structured enough to give an automation newcomer a real syllabus.

• Pro Git (2nd ed.)

  The canonical Git book, free online under Creative Commons. The reference you come back to when "git is hard" really means "I don't understand the object model yet."

Engineering and vendor blogs

Where new ideas actually drop before they hit a conference stage. Subscribe to a couple of these and you'll be ahead of most of the room on what's changing in the field.

• Cloudflare Blog

  Deep technical write-ups on how Cloudflare runs its network. The best ongoing public source on operating at internet scale.

• APNIC Blog

  The Asia-Pacific NIC's blog. Geoff Huston's ISP Column lives here and is the single most cited deep-dive series on routing and the state of the internet.

• Juniper Engineering

  Juniper's engineering and product blog. Strong on data center, service provider, and Junos automation.

• Arista EOS Central

  Arista's technical community and blog hub for EOS, EVPN, leaf-spine designs, and CloudVision.

• Datadog Network Performance Monitoring blog

  Datadog's ongoing write-ups on NPM, cloud network observability, and debugging across hybrid environments.

• Kentik Blog

  Network observability and analysis perspectives from a company that lives in flow data and BGP.

• Brendan Gregg's Linux Performance page

  A collected set of tools, methods, and diagrams for finding performance problems on Linux systems. Useful when a network issue turns out to be a host or kernel issue.

• Krebs on Security

  Long-running blog covering breaches, fraud, and threat actors in detail. Good for staying current on real-world security incidents.

Internet dashboard

Bookmark this for the next time something breaks. Live maps of internet health, crowd-sourced outage trackers, and the official status pages for the clouds, CDNs, and AI providers you depend on. The fastest way to answer "is it me or is it them?"

Where network engineers hang out

Network engineering is a small world. The people in these communities are how most working engineers stay current and how most opportunities surface.

• AONE Discord

  3,500+ network engineers, infrastructure pros, and career-switchers. Active daily.

• USNUA — US Networking User Association

  Community-run networking association for practitioners across the US.

• r/networking

  The largest general networking subreddit. Career questions, troubleshooting, vendor discussion.

• r/ccna

  Study group, exam tips, and lab questions for Cisco's flagship certification.

• r/Cisco

  Cisco-specific technical discussions, IOS questions, and product news.

• Tech Field Day

  Independent IT influencer events. The Networking Field Day series features deep technical briefings from vendors.

• NANOG — North American Network Operators Group

  The professional association for ISP and large-scale network operators.

• APNIC

  Asia-Pacific Network Information Centre community: meetings, mailing lists, training, and policy work for the region's network operators.

• RIPE NCC

  The European RIR's community: RIPE meetings, working groups, and member services for operators across Europe, the Middle East, and Central Asia.

• AutoCon (Network Automation Forum)

  The premier conference for network automation practitioners.

• Cisco Insider Champions

  Cisco's recognition program for active community contributors. Free access to the program once you're in.

Other podcasts and newsletters

The shows and newsletters we recommend alongside our own. Different styles, different angles, all worth your time.

• Heavy Networking (Packet Pushers)

  The flagship technical networking podcast. Long-form vendor and topic deep dives, weekly.

• Day Two Cloud (Packet Pushers)

  The "what happens after the cloud architecture diagram is approved" show. Operations, ops culture, and hybrid-cloud reality.

• Network Collective

  Conversational networking podcast hosted by Russ White and friends. Strong on design philosophy and the why behind protocols.

• Packet Pushers Newsletter

  Daily and weekly digests of networking news, vendor moves, and community links. Easy way to stay current without doomscrolling.

AI and LLMs for network engineers

Knowing how to use LLMs effectively is now a baseline skill for network engineers. Not because AI replaces you, but because AI-augmented engineers are dramatically faster at automation, troubleshooting, documentation, and learning new technologies. Start with the basics, then bring them to your daily work.

• Anthropic Academy

  Free guides on Claude, prompt engineering, and building AI workflows.

• Claude.ai

  Anthropic's consumer chat product. The fastest way to start using Claude for daily engineering work: config review, log analysis, doc summarization, scripting.

• Model Context Protocol (MCP)

  Open standard that lets LLMs connect to real systems (networks, databases, APIs). The path from chat to action.

• LangChain

  The most widely used framework for building LLM-powered applications. Useful when you want to wire an LLM into automation pipelines instead of just chatting with it.

• n8n

  Open-source workflow automation with strong LLM and webhook support. A practical on-ramp to automated AI workflows without writing a full app.

• Cisco AI Solutions

  Vendor view on AI in networking infrastructure and operations.

• Cisco DevNet - AI and Machine Learning

  Free sandboxes, code samples, and learning tracks that show how to apply automation and AI tooling to Cisco networks.

Spec-driven development with AI coding agents

The disciplined alternative to 'vibe coding.' Write a clear spec of what you want the agent to build, refine it through structured phases, and let the agent implement against it. Especially useful for network automation work, where ambiguity in the prompt leads to subtly wrong code that passes review and breaks in production.

• GitHub Spec Kit

  The reference open-source toolkit. Spec → Plan → Tasks → Implement, with each phase producing a Markdown artifact that feeds the next. Works with Copilot, Claude, Gemini, Codex, and others.

• GitHub Blog — Spec-driven development with AI

  The clearest starting-point essay: why writing a spec first beats "vibe coding" once the work is real.

• DeepLearning.AI — Spec-Driven Development with Coding Agents

  Free short course from Andrew Ng's platform, built with JetBrains. Practical, opinionated, and hands-on.

• Microsoft Learn — Spec-Driven Development with GitHub Spec Kit

  Free training module aimed at enterprise developers. Good if you learn best by following a structured walk-through.

• Kiro (AWS)

  AWS's agentic IDE built around spec-first workflows. Useful to see what the methodology looks like when it's baked into the editor instead of bolted on.

• From Vibe Coding to Spec-Driven Development

  A readable intro to the shift, with concrete before/after examples. Good first read if the term is new.

Network automation and operations tools

The open-source stack working engineers reach for when they're moving past CLI-and-spreadsheet operations. Source of truth, config management, observability, validation.

• NetBox

  The de facto open-source source of truth for IP addressing (IPAM) and infrastructure (DCIM). If you're building automation, this is usually the data layer underneath it.

• Nautobot

  Network Source of Truth fork of NetBox with apps, jobs, and a stronger extensibility model. Worth comparing if you're standing up a new instance today.

• Ansible network collections

  The most widely deployed config-management tool for network gear. Mature, vendor-broad, and the default for "I need to push a change to 200 devices safely."

• Nornir

  Pure-Python automation framework. Faster and more flexible than Ansible when you're comfortable in code; pairs well with NAPALM and Netmiko.

• Batfish

  Static analysis for network configurations. Models what your network will do before you push the change. The closest thing the network world has to a type checker.

• LibreNMS

  Free, community-driven network monitoring system. SNMP-based, broad vendor support, fast to stand up for a homelab or a small shop.

• ntopng

  Open source traffic monitoring tool that shows flows, hosts, and protocols in near real time. Good for seeing what is on the wire when troubleshooting live traffic.

Diagramming and topology icons

The editors and icon libraries that make network diagrams look like network diagrams. Useful whether you're sketching a design, writing a runbook, or building slides.

• diagrams.net (draw.io)

  Free, browser-based diagram editor with strong networking shape libraries. The default for ad-hoc topology diagrams.

• Excalidraw

  Hand-drawn-style diagrams that make whiteboard sketches presentable. Great for design conversations and slides.

• Cisco network topology icons

  The official Cisco icon set. Drop them into any diagramming tool and your slides start looking like a Cisco Live deck.

• AWS Architecture Icons

  Official AWS icon and resource library. Required if you draw anything with VPCs, Transit Gateways, or Direct Connects in it.

• Azure architecture icons

  Microsoft's official Azure architecture icon set, including the networking subset.

Vendor Roles For Network Engineers

Most engineers know the path from NOC → ops → architecture. Far fewer hear about the vendor roles that let you stay technical, influence products, and step off the on-call rotation. Below is a quick map of what those roles actually look like, each linked to the AONE episode where someone in the seat walks you through the job. The full collection lives in our Vendor Roles playlist on YouTube.

• Systems Engineer (SE) / Pre-Sales Engineer

  Owns the technical side of the sales motion: discovery, design, demos, proofs of concept, and RFP responses. The engineer in customer meetings alongside the account exec. Watch: Taylor Harris on jumping from post-sales to pre-sales architect.

• Solutions Architect

  Senior technical lead on big designs and complex deployments, often spanning the full product portfolio. Less call volume than an SE, more architecture depth. Watch: David Alicea, from student help-desk worker to Solutions Architect.

• Consulting Engineer

  Project-based delivery role inside a vendor or partner: migrations, redesigns, high-stakes implementations. The hands-on counterpart to the architect. Watch: a walk-through of the role, salary range, skills, and career path.

• Technical Marketing Engineer (TME)

  Builds the deep technical artifacts everyone else uses: reference architectures, validated designs, conference talks, hands-on demos. Half engineer, half storyteller. Watch: a panel of working TMEs on what the job actually looks like.

• Product Marketing Manager (PMM)

  Owns the messaging: who the product is for, what pain it solves, how to talk about it. Writes launch narratives, sales decks, web copy, and analyst briefings. The bridge between what engineering builds and what customers actually understand. Watch: Patrick McCabe on the move from network engineering to product marketing.

• Technical Advocate / Developer Relations

  Bridge between the vendor and the practitioner community. Writes, speaks, runs labs, sits in forums and Discord answering questions. Measured by community trust, not pipeline. Watch: Cisco Sr. Technical Advocates Quinn Snyder and Jason Belk.

• TAC Engineer (Technical Assistance Center)

  The deep technical support engineer on the other end of an enterprise support case. Heavy troubleshooting muscle, internal escalation paths, and high exposure to edge cases. A great place to grow vendor-deep expertise. Watch: a look inside Cisco TAC.

• Industry Analyst / Researcher

  Studies the internet itself: outages, routing anomalies, vendor performance, and publishes. Niche but real path for engineers who like data analysis and writing more than configuration. Watch: Doug Madory's journey from military network engineer to internet analyst.

Industry and career data

Salary and employment data from authoritative sources. Useful for negotiating, planning a career move, or just understanding where the field is going.

• BLS Occupational Outlook — Computer Network Architects

  Federal employment data, salary medians, and job outlook for network architects.

• BLS — Network & Computer Systems Administrators

  BLS data for the adjacent admin/operations track.

• Levels.fyi

  Crowdsourced compensation data, useful for benchmarking offers at large tech employers.

• Robert Half — Technology Salary Guide

  Annual salary benchmarks across IT and networking roles, by region and experience level.

• Glassdoor — Network Engineer salaries

  Crowdsourced salary data filtered to network engineer roles. Useful as a second data point when negotiating.

• ZipRecruiter — Network Engineer jobs

  High-volume job feed for network engineer postings. Good for seeing what employers are actually asking for right now.

Books that hold up

The network engineering books that are still worth your time after years of cloud, automation, and AI reshaping the field, plus a couple of adjacent ones that translate directly to the job.

• Network Warrior, 2nd ed — Gary A. Donahue

  The book most senior network engineers wish they'd read on day one.

• Routing TCP/IP, Volume I — Jeff Doyle & Jennifer Carroll

  The canonical reference for IP routing protocols. Volume II covers BGP and multicast in depth.

• TCP/IP Illustrated, Volume 1 — Kevin R. Fall & W. Richard Stevens

  Bottom-up protocol-by-protocol walkthrough. Dense, definitive.

• Computer Networking: A Top-Down Approach — Kurose & Ross

  The canonical undergraduate networking textbook. Starts at the application layer and works down, which matches how most engineers actually encounter the stack.

• Network Programmability and Automation — Edelman, Lowe & Oswalt

  The practical book on bringing software engineering tools and habits to network operations. Python, APIs, source of truth, CI/CD for networks.

• BGP Design and Implementation — Zhang & Bartell

  A working engineer's book on real BGP designs. Older, but the design patterns still apply when you sit in front of a route reflector.

• The Pragmatic Programmer — Hunt & Thomas

  The book on engineering hygiene. Not networking-specific, but every habit in it translates directly to network automation and operations work.

• The Phoenix Project — Gene Kim et al.

  A novel about an IT department under fire. Required reading for anyone working at the application/infra boundary.

Cognitive biases and decision-making

Most engineering mistakes are not technical, they are cognitive. The traps that derail design reviews, troubleshooting calls, and career decisions are the same traps psychologists have been documenting for decades. Reading on this stuff is one of the highest-leverage habits a working engineer can build.

• List of cognitive biases (Wikipedia)

  The canonical reference. Browse the list once, and you'll start spotting them in design reviews and postmortems.

• The Decision Lab — biases reference

  Plain-English entries for each bias with concrete examples. Better starting point than Wikipedia if the academic tone is rough.

• Thinking, Fast and Slow — Daniel Kahneman

  The foundational book on System 1 / System 2 thinking. Heavy but worth it. Most other books in this category reference it.

• The Art of Thinking Clearly — Rolf Dobelli

  99 short chapters, one bias per chapter. The least intimidating on-ramp.

• Predictably Irrational — Dan Ariely

  Behavioral economics through the lens of everyday decisions. Highly readable.

• Influence: The Psychology of Persuasion — Robert Cialdini

  Six principles of persuasion. Reads as much like a defensive playbook (against vendor pitches and bad architecture decisions) as a sales manual.

• Decisive — Chip & Dan Heath

  A practical four-step framework for making better decisions under uncertainty. Useful for technical and career calls alike.

• Atomic Habits — James Clear

  The most practical modern book on habit formation. Pairs naturally with the biases material: knowing the trap is half the work; building the habit that routes around it is the other half.

• Antifragile — Nassim Nicholas Taleb

  On systems that get stronger under stress. Useful framing for any engineer who builds, operates, or designs anything that has to survive surprises.