Posted inNetworking
DNS Sinkholing with BIND9: Kill Malware at the Network Edge
Build a network-wide DNS Sinkhole using BIND9 RPZ to block malicious domains, C2 callbacks, and ads at the source.
Posted inNetworking
Hardening Linux Networks: Microsegmentation with nftables
Secure your internal network by moving beyond perimeter firewalls. Learn how to use nftables sets and chains to implement a Zero Trust microsegmentation strategy on Linux.
Posted inNetworking
Stop Sending Users Across the Globe: Building GeoDNS with PowerDNS
Stop wasting milliseconds. Learn how to build a self-hosted GeoDNS using PowerDNS to route global traffic to the nearest server for maximum performance.
Posted inNetworking
Speed and Stability: Configuring MultiPath TCP (MPTCP) on Linux
Combine multiple network links for double the speed and 100% uptime. This guide shows you how to configure MultiPath TCP (MPTCP) on modern Linux systems using native kernel tools.
Posted inNetworking
SR-IOV on Linux: Slashing Latency and Reclaiming CPU for Virtual Workloads
Tired of network latency in your VMs? Learn how to configure SR-IOV on Linux to bypass the kernel, reduce CPU overhead, and achieve near-native networking speeds.
Posted inNetworking
Hardening DNS Infrastructure: Using dnsdist for Smart Load Balancing and DDoS Defense
Boost your DNS reliability and security. This guide shows you how to deploy dnsdist for intelligent load balancing, rate limiting, and DDoS protection.
Posted inNetworking
Deploying a Wireless Mesh Network with B.A.T.M.A.N. Advanced (batman-adv) on Linux: Self-Healing Infrastructure for HomeLab and IoT
Six months of running batman-adv in production across a HomeLab and IoT deployment. This guide compares mesh networking approaches, breaks down batman-adv's real-world strengths and weaknesses, and walks through a complete implementation on Ubuntu/Debian with batctl monitoring and systemd automation.
Posted inNetworking
Ubuntu Dual WAN Load Balancing and Failover with IPRoute2 and Netplan
Learn how to configure Dual WAN Load Balancing and Failover on Ubuntu Server using IPRoute2 and Netplan. This guide covers policy-based routing and automated health checks for high-availability networking.
Posted inNetworking
Stop Using ifconfig: A Guide to Professional Networking with nmcli
Ditch deprecated tools like ifconfig. Learn how to use nmcli for professional Linux networking, including static IP setup, DNS management, and SSH safety tips.
Posted inNetworking
Bypassing Strict Firewalls with Chisel: A 6-Month Production Review
Is your firewall blocking everything but port 443? Here is a 6-month field report on using Chisel to tunnel TCP/UDP traffic over WebSockets with zero downtime.