Tag: networking

Apply zero-trust principles to your home lab, network segmentation, VLANs, identity-aware proxies, and Tailscale as the glue.

Decode the postgresql:// connection string, host, port, database, SSL mode, and the gotchas that cause connection refused at deploy time.

Squeeze every MB/s from WireGuard: MTU sizing, GSO/GRO CPU offloading, AllowedIPs routing, PersistentKeepalive tradeoffs, and iperf3 benchmarks included.

Run a WireGuard VPN server in Docker with the linuxserver image, Compose setup, peer config generation, and road warrior access to your home network.

Picking a recursive DNS resolver for your home lab, Unbound, Technitium, and BIND9 compared on speed, GUI, DNSSEC, and split-horizon.

ntopng vs darkstat: full DPI flow analysis vs a tiny always-on stats page. Pick the right tool for home-lab network visibility without losing your mind.

FRR vs BIRD: two open-source routing daemons compared for BGP, OSPF, and home-lab dynamic routing. Which one belongs in your stack?

HAProxy vs Envoy for L4/L7 load balancing, config style, performance, observability, service mesh fit, and which one belongs in your home lab.

LibreNMS auto-discovers your switches, APs, and UPS over SNMP with zero MIB hunting. Here's how to deploy it and stop abusing Prometheus for this job.

SmokePing turns your ISP no-issue-detected excuse into a documented lie. Set it up in Docker and get clear visual proof of latency spikes and packet loss.

Authelia is a bouncer. Authentik is the whole security desk. Pick the right self-hosted SSO for your home lab, with working configs, gotchas, and a migration path.

Pipe ZFS incremental snapshots through WireGuard to a friend's NAS or a remote VPS. Encrypted in transit and at rest, no rsync.net bill or vendor lock-in.