Tag: networking

Docker Networking Demystified

Docker networking confuses everyone at first. Here's the practical breakdown of bridge, host, overlay, and macvlan — with real Compose examples.

Proxmox NAT Bridge: One IP, Many VMs

Run multiple Proxmox VMs and LXC containers behind a single public IP using NAT bridging and iptables port forwarding. Updated for Proxmox VE 8.

TLS 1.3: Modern Encryption Without the Existential Dread

TLS 1.3 explained without the PhD: faster handshakes, better ciphers, and how to actually configure Nginx and Caddy to use it.

IPFS: Peer-to-Peer File Storage for People Who've Seen Too Many 404s

Learn IPFS distributed storage: content addressing, CIDs, installing the IPFS daemon, pinning files, public gateways, and real use cases for resilient self-hosted file storage.

The Zero-Trust Home Lab

Apply zero-trust principles to your home lab — network segmentation, VLANs, identity-aware proxies, and Tailscale as the glue.

HAProxy: Load Balancing Done Right

HAProxy is the battle-tested load balancer powering GitHub, Reddit, and Instagram. Here's how to actually use it without reading 500 config options.

Cloudflare WAF: Free Tier Firewall Rules

Cloudflare's free tier WAF is more powerful than most people use. Here's how to actually configure it — rules, rate limits, and all.

Cloudflare DNS: Beyond Pointing Records

Stop using your registrar's janky DNS panel. Here's how Cloudflare DNS actually works — proxying, DNSSEC, dynamic DNS, and email records that don't break.

Traefik: Docker Routing with Labels

Master Traefik's label-based routing in Docker: entrypoints, routers, middlewares, TLS, and the mental model that makes it all click.

Nginx Proxy Manager for Normal Humans

Set up Nginx Proxy Manager in Docker, get SSL certs, proxy hosts, access lists, and TCP streams — without reading a 40-page nginx manual.

VLAN Basics for Home Labs: Segment Your Network Before It Segments You

Learn VLAN basics for your home lab: 802.1Q tagging, trunk vs access ports, managed switch setup, and pfSense VLAN configuration to isolate IoT, guests, and your NAS.

Port Knocking: Simple Obscurity for SSH Access

Hide your SSH port from scanners with port knocking. It's not a replacement for security, but it's a valid defense-in-depth tactic.