Posted inNetworking
Beyond the CLI: Mastering Network Automation with NETCONF and YANG
Ditch the brittle CLI scraping scripts. Learn how to use NETCONF and YANG to build reliable, vendor-neutral network automation using Python.
Posted inNetworking
SDN in Practice: Building a Programmable Network with OpenFlow, OVS, and Ryu
Ditch manual CLI configurations. Learn how to build a programmable network using OpenFlow, Open vSwitch, and Ryu for both lab testing and production environments.
Posted inNetworking
XDP eBPF on Linux: Building a High-Performance Packet Filter and Load Balancer with Microsecond Latency
After six months running XDP eBPF programs on production Linux edge servers, the results are clear: packet filter throughput jumped from under 1 Mpps with iptables to over 14 Mpps on a single CPU core, with p99 latency under 3 microseconds. This guide covers how XDP compares to iptables and DPDK, its real-world tradeoffs, and a full implementation of a dynamic blocklist filter and Layer 4 load balancer using eBPF maps.
Posted inNetworking
GeoIP Blocking with nftables and MaxMind GeoLite2 on Linux: Filter Traffic by Country
GeoIP blocking with nftables and MaxMind GeoLite2 lets you drop traffic from entire country IP ranges at the firewall level, before it reaches your application. This guide covers the full setup: downloading the database, extracting country ranges, loading them into nftables sets, and automating bi-weekly updates with systemd and cron.
Posted inNetworking
Microsecond Precision with linuxptp: A Guide to PTP/IEEE 1588 on Linux
Move beyond NTP. This guide shows you how to implement PTP/IEEE 1588 on Linux using linuxptp to achieve sub-microsecond time synchronization for critical infrastructure.
Posted inNetworking
Unbound DNS Resolver Setup Guide: Build a Secure Recursive DNS Server with DNSSEC Validation
Learn how to install and configure Unbound as a recursive DNS resolver with DNSSEC validation on Linux. This step-by-step guide covers quick setup, split-horizon DNS, rate limiting, and production tips for homelab and small enterprise environments.
Posted inNetworking
Stop Mapping Networks Manually: Use LLDP and CDP on Linux Instead
Stop relying on outdated spreadsheets. Learn how to use lldpd on Linux to automatically discover switch ports and build a real-time network map.
Posted inNetworking
Stop the ‘Sticky Client’ Problem: Configuring 802.11r/k/v in hostapd
End the 'sticky client' problem. Configure 802.11r, 802.11k, and 802.11v on hostapd to achieve sub-50ms roaming and seamless Wi-Fi transitions.
Posted inNetworking
DNS Sinkholing with BIND9: Kill Malware at the Network Edge
Build a network-wide DNS Sinkhole using BIND9 RPZ to block malicious domains, C2 callbacks, and ads at the source.
Posted inNetworking
Hardening Linux Networks: Microsegmentation with nftables
Secure your internal network by moving beyond perimeter firewalls. Learn how to use nftables sets and chains to implement a Zero Trust microsegmentation strategy on Linux.