Tag: vpn

OpenConnect replaces the bloated AnyConnect client on Linux. Run ocserv for a self-hosted Cisco-compatible VPN server — no 200MB installer required.

Squeeze every MB/s from WireGuard: MTU sizing, GSO/GRO CPU offloading, AllowedIPs routing, PersistentKeepalive tradeoffs, and iperf3 benchmarks included.

Run a WireGuard VPN server in Docker with the linuxserver image — Compose setup, peer config generation, and road warrior access to your home network.

Pipe ZFS incremental snapshots through WireGuard to a friend's NAS or a remote VPS. Encrypted in transit and at rest — no rsync.net bill or vendor lock-in.

WireGuard is fast out of the box, but default config leaves throughput on the table. Tune MTU, use the kernel module, and benchmark what you actually get.

OpenVPN is the battle-tested workhorse. WireGuard is everything VPNs should have been from the start. In 2026, here's which one you should actually use.

You enabled the VPN but half your traffic still bypasses it. Here's why and how routing actually works.

Set up a WireGuard VPN kill switch and prevent DNS leaks on Linux. Practical iptables rules, resolv.conf locking, and systemd-resolved config.

Go beyond tailscale up with ACL policies, exit nodes, subnet routers, and MagicDNS. Plus: self-host your own control plane with Headscale for full independence.