Tag: networking

Snort invented network intrusion detection. Suricata multi-threaded its way past it. Here's how to set up real IDS/IPS on your home lab and actually understand what it's telling you.

Linux ships with conservative kernel defaults. These sysctl settings tune your server for networking, memory, and file I/O, with explanations, not just paste-and-pray values.

Authelia is a bouncer. Authentik is the whole security desk. Pick the right self-hosted SSO for your home lab, with working configs, gotchas, and a migration path.

Real cloudflared config: many services on one tunnel, Access policies, origin TLS, what quick tunnels are for, and what Cloudflare can see in your traffic.

Fail2ban bans IPs that attack you. CrowdSec bans them before they attack you, using community threat intelligence. Here's how to set up both and why you might want both.

OpenVPN is the battle-tested workhorse. WireGuard is everything VPNs should have been from the start. In 2026, here's which one you should actually use.

Docker networking confuses everyone at first. Here's the practical breakdown of bridge, host, overlay, and macvlan, with real Compose examples.

Run multiple Proxmox VMs and LXC containers behind a single public IP using NAT bridging and iptables port forwarding. Works on Proxmox VE 8 and 9.

TLS 1.3 explained without the PhD: faster handshakes, better ciphers, and how to actually configure Nginx and Caddy to use it.

Learn IPFS distributed storage: content addressing, CIDs, installing the IPFS daemon, pinning files, public gateways, and real use cases for resilient self-hosted file storage.

Apply zero-trust principles to your home lab, network segmentation, VLANs, identity-aware proxies, and Tailscale as the glue.

HAProxy is the battle-tested load balancer powering GitHub, Reddit, and Instagram. Here's how to actually use it without reading 500 config options.