Zero Trust Archives

Set Up Cloudflare Tunnel with Docker: Expose HomeLab Services Securely Without Port Forwarding

October 17, 2026

Securely expose self-hosted HomeLab services to the web without port forwarding or dynamic DNS. Learn how to deploy Cloudflare Tunnel with Docker Compose and lock down access.

DevOps

Deploying Linkerd Service Mesh on Kubernetes: Lightweight Zero-Trust mTLS and Network Performance

October 7, 2026

Deploy Linkerd Service Mesh on Kubernetes to secure east-west microservices traffic. Achieve automatic Zero-Trust mTLS, sub-millisecond p99 latency, and lightweight resource usage with Linkerd's Rust-powered micro-proxy.

Security

Zero Trust on Linux: A Practical Guide to Deploying HashiCorp Boundary

September 10, 2026

Replace outdated VPNs with HashiCorp Boundary. This guide provides a hands-on approach to deploying controllers, workers, and Zero Trust access on Linux.

Security

Going Dark: How I Used OpenZiti to Close Every Open Port on My Linux Servers

September 7, 2026

Tired of botnets hitting your open ports? Learn how to use OpenZiti to make your Linux services completely invisible to the public internet while maintaining easy access.

DevOps

Zero Trust in Practice: Scaling mTLS on Kubernetes with SPIRE and SPIFFE

August 17, 2026

Ditch IP-based security for a robust Zero Trust architecture. Discover how to implement SPIRE and SPIFFE for automated mTLS on Kubernetes, based on 6 months of production experience.

Networking

Kill the VPN: Building Zero Trust with Cloudflare Access and WARP

July 31, 2026

Ditch the clunky VPN. This guide shows you how to use Cloudflare Access and WARP to create secure, identity-based connections to your internal infrastructure.

Networking

Ditch the VPN: Building an Identity-Aware Proxy with Pomerium

July 28, 2026

Tired of slow VPNs? This guide shows you how to set up Pomerium, a modern Identity-Aware Proxy, to secure your internal tools with Zero Trust logic using Docker and GitHub.

Networking

Hardening Linux Networks: Microsegmentation with nftables

May 27, 2026

Secure your internal network by moving beyond perimeter firewalls. Learn how to use nftables sets and chains to implement a Zero Trust microsegmentation strategy on Linux.

Security

Identity-Based SSH: Why I Finally Closed Port 22 and Ditched Key Management

May 12, 2026

Is SSH key management slowing you down? Switch to identity-based authentication with Tailscale. Close Port 22, use your SSO for access, and simplify your server security in under 20 minutes.

Security

Beyond the Perimeter: A 6-Month Post-Mortem on mTLS with Nginx

May 3, 2026

A deep dive into implementing Mutual TLS (mTLS) with Nginx and OpenSSL. Explore real-world performance metrics, automation strategies, and security benefits after 6 months in production.