Latest News

Finding Exposed Services (and Fixing Them) with ScanSearch

Ever wondered what parts of your infrastructure are accidentally visible to the entire internet? It's a common blind spot. We spend a lot of time se…

Why Sweating the Details Matter: Flask, port 5000, localhost, Safari and macOS

Pop quiz : Suppose you are developing a Flask app. Flask uses port 5000 as its default port. Now suppose that you have your Flask app running on mac…

The Art of Intentional Networking at Tech Conferences

It's conference season! I already had to sit at home jealous while friends had fun at Render ATL, but it's my turn soon with Commit Your Code next w…

How Does One Server Find Another Server? DNS, Private DNS, and Service Discovery Explained

Hey developers! 👋 Welcome back to our networking and infrastructure deep-dive series. In the previous article we learned something surprising: Two s…

You're probably overestimating public Wi-Fi 'client isolation'

A Japanese version of this is on Zenn . I was working from a café the other day and idly wondered: on this Wi-Fi, what does my Mac actually look lik…

Debugging my new network, when 10 Gigabit Ethernet Runs at 300 Megabits

AWS VPC Networking Fundamentals: VPCs, Subnets, CIDR, Route Tables, IGW, and NAT Gateways

If you've provisioned a VPC from a Terraform module without fully internalising what each piece is doing, that's fine — right up until something bre…

Understanding `dig`: How to Actually Read DNS Query Output

If you've ever stared at the output of dig example.com and only understood half of it, you're not alone. dig (Domain Information Groper) is the tool…

Your outage monitor under-counts outages and over-states their length, at the same time

I have a poller that watches a wifi link. Every 60 seconds it asks "are we associated?" — if not, it opens an episode, climbs a remediation ladder,…

Building Malaaz: Decentralized Mesh Network Simulation & Signal Reconstruction

"What if a massive electromagnetic storm or EMP wiped out all traditional communication infrastructure in an instant? How can a decentralized networ…

Load Balancing: How Backend Systems Handle Millions of Requests

Imagine you have built a backend API that works perfectly. You deploy it to a server, connect your database, and everything is running smoothly. The…

Writing QUIC in Pure Java

I maintain gumdrop , an async, non-blocking Java server framework. Last year I wanted to add HTTP/3 support, and ran into a wall: the Java ecosystem…

Wireshark for Beginners:How to Capture and Analyze Network Traffic

Wireshark is an open-source network protocol analyzer that allows security professionals, system administrators, and cybersecurity learners to captu…

What Actually Happens When You Open a Website?

You type: https://example.com Press Enter . And within seconds, the website appears on your screen. But have you ever wondered what actually happens…

Connection refused" has three different root causes here's how to tell them apart with evidence

Connection refused" and a silent timeout look like the same failure to whoever's paging you at 2am. They're not. They come from different layers of…

An interactive introduction to the spanning tree protocol

isolcpus= takes CPUs off the scheduler. Hardware IRQs still land there.

The blunt tool is still in a lot of GRUB files: GRUB_CMDLINE_LINUX_DEFAULT = "isolcpus=0,1" Then update-grub (or grub2-mkconfig ) and reboot. Usersp…

Routeup – stable local HTTPS URLs and opt-in public tunnels

I built Routeup around a simple idea: local apps should use their real names. It was inspired by Portless , but I also wanted built-in public tunnel…

Why I Couldn't Access My Own Site (But My Phone Could): A Cloudways Auto-Ban Story

I sat down to work on Rev6 and couldn't load the site. Not a slow load, not an SSL warning — nothing. The browser just spun until it gave up. My fir…

I Built a Mesh Network That Works When the Internet Doesn't

What happens when the power grid fails? When cellular towers collapse? When the internet simply disappears? You get silence. Isolation. No way to ca…

Building an HTTP Server From Scratch using TCP.

HTTP is something I interact with every single day, whether I am fetching data on the frontend or building backend APIs. But for a long time, if you…

Building a 24/7 Home Security NVR Using Frugal Hardware and a Raspberry Pi 3 Bridge

Building a 24/7 Home NVR Using Frugal Hardware and a Raspberry Pi 3 Bridge How to transform a 10-year-old Dell laptop and a 7-year-old Raspberry Pi…

DNS, HTTP/1.1, HTTP/2, HTTP/3, CORS — A Beginner's Deep Dive

What is DNS and why we need it? DNS stand for Domain Name System, and it's main job is to translate domain name into IP. Think like every server has…

Tailscale Kernel TUN in Unprivileged LXC: Direct SSH Without Userspace Networking

tailscale up --tun=userspace-networking gets you a green dot in the admin console and almost nothing else. The node appears in your tailnet, tailsca…

Day 30: Hard Reset Forgets on Purpose, and NAT Needs a Guardrail Switched Off

Thirty days in, and today both tasks required deliberately switching off something that exists to protect you. Git refuses to let you overwrite shar…

VRP Is Ready for External Validation — One Company Can Be the First to Pilot It

VRP Is Ready for External Validation — Who Will Be the First to Pilot It? My name is Vitalijus Riabovas. I am the independent architect and creator…

My Wi-Fi networks

I have configured my Wi-Fi router to provide four wireless networks: HomeNet_Main HomeNet_Guest HomeNet_SmartDevices HomeNet_HVAC HomeNet_Main This…

Certificate Pinning in Flutter

Certificate Pinning in Flutter HTTPS protects data in transit by authenticating the server and encrypting traffic. Certificate pinning adds another…

Kubernetes DNS was failing 33% of the time. CoreDNS was fine.

A WordPress site on our platform started throwing Error establishing a database connection . Not always — maybe one page load in three. Reload, and…

5 Common Subnetting Mistakes That Break Real Networks

Subnetting errors rarely announce themselves as "bad math." More often, two devices make different decisions about whether a destination is local, a…