Collateral Freedom: Costly to Block
Protocol mimicry only wins the hiding fight. Learn why relay cascades, domestic hosting, and disposable infrastructure make blocking your traffic expensive.
Tag: networking
All the articles with the tag "networking".
Meshtastic vs Reticulum
Meshtastic is a messaging appliance. Reticulum is a whole network stack that happens to run over LoRa. Why comparing the two directly misleads people.
wg-easy: WireGuard for Humans Who Hate Config Files
wg-easy gives WireGuard a web UI: create clients, scan QR codes, see traffic stats, no SSH required. Self-hosted VPN made actually easy.
REALITY: Borrowing a TLS Handshake
REALITY does not disguise your traffic as a real TLS handshake, it serves an actual one. How that works, a working config, and the honest limits of the trick.
LoRa Mesh Hardware Buying Guide
Which LoRa boards to buy for Meshtastic or MeshCore, why the antenna and mounting height matter more than the radio, and what to skip on your first order.
nftables in 2026: Stop Pretending iptables Will Live Forever
iptables is in soft retirement. Here's why the nft shim isn't a long-term plan and what direct nftables syntax actually buys you.
Why Your VPN Is Already Detected
Encryption hides content, not shape. Here's why state-level censors don't read your VPN traffic, they recognize it, and what actually still works in 2026.
LoRa Mesh vs LoRaWAN vs Helium
LoRa, LoRaWAN, and Helium are not the same thing. What each one actually is, what it is good for, and why the Helium IoT network deflated the way it did.
Meshtastic vs MeshCore in 2026
Meshtastic vs MeshCore: routing models, hop limits, who gets to repeat traffic, and which LoRa mesh firmware you should flash on your first radio in 2026.
Pangolin: Self-Hosted Cloudflare Tunnel Alternative
Pangolin gives you Cloudflare Tunnel-style access to home services via a $5 VPS, WireGuard mesh, and zero vendor lock-in.
systemd-resolved: The DNS Resolver You're Already Using Wrong
systemd-resolved does way more than mangle /etc/resolv.conf. Here's how its stub resolver, split DNS, DoT, DNSSEC, and resolvectl actually work.
k3s + Tailscale: Cluster Across Two Sites
Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric, home lab server plus cloud VPS, one single kubectl context.