Tag: networking

Configure OPNsense gateway groups for WAN failover and load balancing, then layer policy-based routing so specific hosts or VLANs use a chosen WAN link.

One central CrowdSec LAPI, remote log-parsing agents, and bouncers on every box, so an SSH brute-force on one server gets blocked everywhere else too.

NetAlertX v26.9.0 ships a built-in MCP server with 12 tools. Learn how to wire it into Claude Code, what it exposes, and when to use Home Assistant instead.

Dual-stack IPv6 for home labs: DHCPv6-PD delegation, stable addressing past SLAAC privacy extensions, real nftables firewall rules, and Docker IPv6 done right.

Tinyauth vs Pocket ID vs Authelia compared for home labs: setup cost, forward-auth support, real OIDC, passkeys, 2FA, and when to move up to Authentik.

Used SFP+ gear turns 10GbE from a $5k fantasy into a $200 build. Mellanox NICs, the MikroTik CRS305 switch, DAC cabling, and where the savings stop.

Used enterprise-grade managed switches under $100: Aruba, Brocade, MikroTik picks, VLAN setup, wattage, and gotchas for home lab networks.

A WordPress login bot burned 90% of my Cloudflare Workers free tier in two hours attacking a site that has never run PHP. Here's what actually stopped it.

Four file-sharing protocols compared for home labs: NFS speed, SMB compatibility, SSHFS convenience, WebDAV over HTTP, and which one to pick per use case.

Stop opening port 22 to the world. SSH bastion hosts, ProxyJump chains, session recording, and self-hosted Teleport alternatives that actually work.

Your ISP's box doesn't have to run your network. How to find bridge mode, dodge double NAT, and hand real routing duty over to a MikroTik router instead.

Route only the traffic you want through a SOCKS5 proxy via ssh -D. Browser extensions, curl, git, ProxyChains, autossh, and DNS leak gotchas, no VPN needed.