Tag: networking

Access services on the host machine from inside a Docker container using host-gateway or host.docker.internal — no hardcoded IPs.

Add load balancing and failover to your Docker setup using Swarm, nginx, HAProxy, and Keepalived — high availability without Kubernetes.

Disaster recovery for your Linux home lab — tiered backups, a restic script that actually runs, restore drills, and the gotchas that bite at 2 AM.

OpenConnect replaces the bloated AnyConnect client on Linux. Run ocserv for a self-hosted Cisco-compatible VPN server — no 200MB installer required.

Proxychains-ng, Tor, and VPN+Tor combos tested honestly: which setups actually anonymize traffic and which are security theater you should stop trusting.

Self-hosted email with Mailcow or Stalwart means daily SPF, DKIM, DMARC, and IP blacklist battles. Here's the honest case against running your own mail server.

socat wires TCP, UDP, Unix sockets, files, and serial ports together. Port forwarding, OpenSSL tunnels, traffic capture — this is netcat with superpowers.

ss replaces netstat on modern Linux: faster, shows more socket detail, and reads from the kernel. Every netstat command you rely on, rewritten for ss.

TLS tunneling for legacy plaintext services — stunnel's X.509 cert model vs spiped's pre-shared key simplicity, and when each one actually wins.

Suricata beats Snort on multi-threading and EVE JSON logging. Side-by-side IDS/IPS breakdown with Suricata install, suricata.yaml config, and OPNsense setup for home labs.

AV vs EDR — traditional antivirus signatures vs behavioral endpoint detection. What each catches, what it misses, and what you actually need.

Apply zero-trust principles to your home lab — network segmentation, VLANs, identity-aware proxies, and Tailscale as the glue.