Tag: networking

Replace flannel with Cilium 1.19 on k3s for eBPF routing, Hubble observability, WireGuard encryption, and L7 network policies, here's when it pays off.

Run a single k3s cluster spanning two physical sites using Tailscale as the WireGuard fabric, home lab server plus cloud VPS, one single kubectl context.

Tailscale vs Nebula vs ZeroTier vs NetBird, honest comparison of mesh VPN options for homelabs, small teams, and self-hosters in 2026.

How to expose a possibly-vulnerable app to the public internet and survive it: rootless containers, a file-integrity tripwire, and zero inbound SSH on the box.

SFP+ optics, DACs, AOCs, and fiber for home lab 10G networking, what to buy, what to avoid, and how to stop vendor lock-in from wrecking your wallet.

Ingress is the annotation-soup classic. Gateway API is the role-oriented future with proper L4/L7 separation. Here's when to migrate and when to wait.

Rootless Docker tuning deep-dive: network drivers, env vars, port drivers, cgroup delegation, and real troubleshooting, anchored to Docker Engine 29.x.

Boot any OS over the network using iPXE, covers dnsmasq proxyDHCP setup, HTTP boot menus, Talos OS live boot, and the quick netboot.xyz shortcut method.

Mikrotik routers cost $50, run a real OS, and humiliate prosumer gear. RouterOS basics, VLANs, firewalling, and why your homelab probably needs one of these.

Two FreeBSD firewall distros, one bitter fork. pfSense vs OPNsense in 2026, which one to pick for your home lab, and why the licensing drama still matters.

Zeek (formerly Bro) turns network traffic into structured logs you can actually query. The IDS that doesn't shout, it documents. Setup and use in a home lab.

traceroute lies. mtr tells the truth. Here's how to read packet-loss reports like an oncall engineer and stop blaming your ISP for the wrong hop.