Why Your VPN Isn't Routing What You Think
You enabled the VPN but half your traffic still bypasses it. Here's why and how routing actually works.
Tag: networking
All the articles with the tag "networking".
The Header Your Reverse Proxy Keeps Dropping
Your backend can't see the client IP because the reverse proxy silently dropped it. Here's why and how to fix it right.
IPv6 on Your Home Lab: You Should Care (Here's Why)
IPv6 isn't just for the future—it's broken on your network right now. Here's why you should care and how to actually set it up.
DNS Over HTTPS and TLS: Encrypt Your DNS Before Your ISP Sells It
Understand DoH, DoT, and DoQ encrypted DNS protocols and set up self-hosted encrypted DNS with AdGuard Home or Pi-hole. Stop your ISP from logging every domain you visit.
tcpdump Basics: Capture Traffic Without Wireshark
You don't need a GUI to see network packets. Learn tcpdump filters, flags, and pcap capture to debug servers from the command line, no Wireshark needed.
TCP Keepalives: Why Connections Die and How to Fix It
Long-lived connections dropping randomly? Your OS is killing them. Here's why keepalives matter and how to tune them.
Caddy Advanced: Automatic HTTPS, Plugins, and Config That Doesn't Make You Cry
Advanced Caddy server configuration: wildcard certs, Caddyfile matchers, Docker label integration, rate limiting, forward auth with Authelia, and the JSON API.
The MTU Problem Nobody Diagnoses Correctly
MTU mismatches silently break large file transfers, backups, and video calls. Here's how to find and fix the wrong frame size on your network.
VPN Kill Switch and DNS Leak Prevention: Paranoia, Justified
Set up a WireGuard VPN kill switch and prevent DNS leaks on Linux. Practical iptables rules, resolv.conf locking, and systemd-resolved config.
BGP in Your Home Lab: Dynamic Routing for People Who've Run Out of Static Routes
Run BGP in your home lab with FRRouting. Covers iBGP vs eBGP, FRR installation, basic BGP config, peering with OPNsense, route filtering, and when BGP is actually worth the complexity.
DNS Troubleshooting from the Command Line
DNS broke again. Here's the exact command sequence to figure out what's happening without touching a GUI.
Tailscale Deep Dive: Mesh VPN That Just Works (and Why That's Suspicious)
Go beyond tailscale up with ACL policies, exit nodes, subnet routers, and MagicDNS. Plus: self-host your own control plane with Headscale for full independence.