WireGuard Linux Server Setup: A Reliable Step-by-Step
Set up WireGuard on a Linux server with clear steps for keys, routing, firewall rules, NAT, split tunnels, handshakes, and full-tunnel DNS safely.
Tag: Network security
Three Types of Remote Access Software Explained
Three types of remote access solve different problems. Pick relay-based tools for one-offs, peer-to-peer for speed, or RMM platforms for fleet management.
Nginx as Linux Reverse Proxy: Setup and Alternatives
nginx leads for Linux reverse proxies with event-driven workers. Learn setup steps, when to choose HAProxy or Caddy, and security best practices.
XDP SYN Flood Protection: Building eBPF Defenses
Build an eBPF XDP program that stops SYN floods at the NIC driver with per-IP rate limiting, hash maps, and line-rate packet drops before the kernel stack.
XDP Firewall on OpenWRT: Early Packet Drop at Line Rate
XDP intercepts packets in the driver before the kernel allocates buffers, enabling high-volume DDoS mitigation and load balancing with minimal CPU cost.
Create eBPF IDS on Linux
I will walk you through a working eBPF IDS Linux setup that hooks kernel events, streams signals to user space, and keeps performance predictable. I start from how the verifier and JIT work in the linux kernel so you can pick the right attach points. I explain kprobes, tracepoints, uprobes, XDP, and LSM in plain […]
Detect Port Scans with eBPF
The eBPF port scanning detection approach shows how kernel-level programs can answer TCP SYNs without leaving the fast path. I guide you through a compact XDP example that reads Ethernet, IPv4, and TCP headers in the kernel. You will see how a simple program spots a SYN and replies with a SYN-ACK to emulate an […]
Block IP Addresses With eBPF: XDP Attach Syntax
Load and attach XDP programs to network interfaces using bpftool and ip link pinned syntax. Master the two-step process: pin first, then attach to eth0.
Network Segmentation in a Homelab: 6 Setup Steps
A secure homelab starts with untrusted devices on their own VLAN; this guide covers trunks, access ports, firewall rules, Wi-Fi, and testing.