VPN Kill Switch and DNS Leak Prevention: Paranoia, Justified
Set up a WireGuard VPN kill switch and prevent DNS leaks on Linux. Practical iptables rules, resolv.conf locking, and systemd-resolved config.
Tag: networking
All the articles with the tag "networking".
BGP in Your Home Lab: Dynamic Routing for People Who've Run Out of Static Routes
Run BGP in your home lab with FRRouting. Covers iBGP vs eBGP, FRR installation, basic BGP config, peering with OPNsense, route filtering, and when BGP is actually worth the complexity.
Suricata vs Snort: Intrusion Detection for the Paranoid Home Lab Owner
·
Updated:
Suricata beats Snort on multi-threading and EVE JSON logging. Side-by-side IDS/IPS breakdown with Suricata install, suricata.yaml config, and OPNsense setup for home labs.
DNS Troubleshooting from the Command Line
DNS broke again. Here's the exact command sequence to figure out what's happening without touching a GUI.
Tailscale Deep Dive: Mesh VPN That Just Works (and Why That's Suspicious)
·
Updated:
Go beyond tailscale up with ACL policies, exit nodes, subnet routers, MagicDNS, and Taildrop. Plus: self-host your own control plane with Headscale.
nmap for Your Own Network: What You Should Be Scanning
nmap isn't just for pen testers. Learn what's actually worth scanning on your home network and what those open ports really mean.
curl Flags Every Developer Should Know
Master the curl flags that'll save you hours debugging APIs, downloads, and web requests. From -X to --compressed, here's what actually matters.
UFW Advanced: Rate Limiting, Logging, and Rules That Actually Make Sense
Go beyond ufw allow/deny: rate limiting with ufw limit, logging levels, before.rules for iptables, IPv6 handling, Docker bypass fixes, and fail2ban integration.
DDoS Mitigation: Teaching Your Server to Say No Politely (Then Impolitely)
DDoS mitigation for self-hosters: Nginx rate limiting, Fail2ban, Cloudflare free tier, CrowdSec, and iptables tricks that actually work.
WireGuard Is Fast, But You're Leaving Performance on the Table
·
Updated:
Squeeze every MB/s from WireGuard: MTU sizing, GSO/GRO CPU offloading, AllowedIPs routing, PersistentKeepalive tradeoffs, and iperf3 benchmarks included.
Traefik vs Nginx Proxy Manager: Reverse Proxies for Humans
Traefik vs Nginx Proxy Manager compared for self-hosters. Docker auto-discovery, SSL certs, GUI vs labels, performance, and when to pick each reverse proxy.
Proxy Chains and Anonymization: What Actually Works and What's Just Theater
·
Updated:
Proxychains-ng, Tor, and VPN+Tor combos tested honestly: which setups actually anonymize traffic and which are security theater you should stop trusting.