Tag: networking

Go beyond tailscale up with ACL policies, exit nodes, subnet routers, MagicDNS, and Taildrop. Plus: self-host your own control plane with Headscale.

nmap isn't just for pen testers. Learn what's actually worth scanning on your home network and what those open ports really mean.

Master the curl flags that'll save you hours debugging APIs, downloads, and web requests. From -X to --compressed, here's what actually matters.

Go beyond ufw allow/deny: rate limiting with ufw limit, logging levels, before.rules for iptables, IPv6 handling, Docker bypass fixes, and fail2ban integration.

DDoS mitigation for self-hosters: Nginx rate limiting, Fail2ban, Cloudflare free tier, CrowdSec, and iptables tricks that actually work.

Squeeze every MB/s from WireGuard: MTU sizing, GSO/GRO CPU offloading, AllowedIPs routing, PersistentKeepalive tradeoffs, and iperf3 benchmarks included.

Traefik vs Nginx Proxy Manager compared for self-hosters. Docker auto-discovery, SSL certs, GUI vs labels, performance, and when to pick each reverse proxy.

Proxychains-ng, Tor, and VPN+Tor combos tested honestly: which setups actually anonymize traffic and which are security theater you should stop trusting.

Incomplete chains, bundles in the wrong order, and self-signed certs all read as untrusted. Diagnose with openssl s_client, then rebuild the chain properly.

Firewall rules are evaluated top-down, first match wins. One misplaced ALLOW rule above your denials silently defeats all your security. Here's the fix.

Verify fail2ban is protecting you: check jails, test bans, monitor logs, common misconfiguration, and unban IPs when needed.

SSHFS mounts remote filesystems over SSH so you can browse and edit files locally, faster than scp for interactive work.