DevOps

The AWS network inventory, now also a CSV you can filter

What the VPC Atlas inventory holds, the four formats it comes in, and why I made the CSV one flat row per resource. The diagram is the picture, the…

Your Firewall Already Saw the Attack: Bringing AI Detection to Network Logs

Endpoint agents are good at seeing what happens on a machine. But a lot of an attack happens between machines: the scan that finds an exposed servic…

Spoofing WiFi MAC Addresses with a Windows Kernel Driver

1. What a MAC address is A MAC address is six bytes. Convention writes them as hex pairs separated by colons: A4:5E:60:C3:1B:07 The first three byte…

HANDS-ON NETWORKING LAB: Configuring 20 PCs, 1 DHCP Server, and 2 Switches

As part of my practical networking journey, I worked on a small office network infrastructure consisting of 20 client PCs, 1 DHCP server, and 2 swit…

NAT Gateway vs VPC Endpoints: Which Path Should Your Private AWS Traffic Take?

Private subnets are one of the first good habits you learn in AWS. Put your EC2 instances, containers and databases where the internet cannot start…

How to Test If Your DDoS Protection Actually Works (Before an Attacker Shows You)

Your CDN dashboard says "attack mitigated". Your origin server says otherwise. One of them is lying, and finding out which one — before a real attac…

Wi-Fi or VPN sign-in failing after a Windows update? What to check

When a user says their Wi-Fi or VPN stopped working after an update, there are quite a few things to check. Drivers, connection profiles, credential…

How to find the closed port that stops an EC2 web page loading, and lock down SSH

You launched an Amazon EC2 instance, installed a web server, and typed its public address into a browser. The tab spins and then times out. Nothing…

Works on desktop, fails on phones: the post-quantum TLS bug hiding in your network card

Modern browsers now send a larger TLS hello. On some Windows servers, a receive-offload bug in the network card silently breaks about half of those…

MiBee Steward v0.7.3: schema break, a Rust agent, and four bugs only the field could find

The agent went quiet for 19 minutes and systemd stayed green On 2026-10-12 I rebuilt the database of my own main center. Nineteen minutes later I no…

SQL Server for Genetec Security Center

When a Security Center system slows down, the first suspect is usually the Archiver and the second is the network. In my experience the database is…

How We Built a 200-User Office Network in Three Weeks

A financial firm was moving into a full floor in Midtown Manhattan. More than 200 people would sit down on opening day and expect the wired ports, t…

CIDR and Subnet Mask

Hello All, I would like to share something I learned while preparing for the AWS Certified Advanced Networking - Specialty (ANS-C01) certification.…

Who Decides When a Windows Application Needs the Internet?

Your computer may be communicating with remote systems even when you are doing nothing that requires the internet. The applications may be legitimat…

The hardest part of my NAS dashboard was getting traffic to reach it

I built NAS Device Flow to choose which devices on my home Wi-Fi use rule-based proxy routing. The daily interaction is a switch beside each device.…

What Is DNS Tunneling? How Can Hackers Hide Data Inside DNS Queries?

Every time a browser visits a website, a DNS query leaves the machine. The query contains a domain name. That name resolves to an address. The conne…

[Tailscale] Complete Guide to VPN Connection to Home LAN with Subnet Router

Accessing Your Home LAN from Outside with Tailscale Subnet Router I want to access my home NAS or server while away from home. But VPN setup is diff…

The history of the Hetzner Cloud network stack

Kubernetes просто часть 6: Для чего нужен Gateway API?

В этой части разберём, зачем Kubernetes понадобился Gateway API , если уже существует Ingress. На простом примере посмотрим, как Gateway и HTTPRoute…

SOCKS5 vs HTTP proxy: DNS, speed, security, which to use

Originally published on proxymint . SOCKS5 vs HTTP proxy compared: what each carries, where DNS resolves (socks5 vs socks5h), speed, auth, client su…

The internet's root key rotates in five days. Your resolver may not be ready.

On October 11 — five days from this post — the most trusted key on the internet changes hands. KSK-2017, the key-signing key that has authenticated…

Install Mininet on Ubuntu for Network Simulation: 3 Methods That Actually Work

Learning computer networking is ten times easier when you can build a topology and ping it yourself. The problem: most students do not own a stack o…

Two Chinese cloud providers have the same broken IP metadata. One is 6x more likely to be blacklisted.

Tencent Cloud and Alibaba Cloud look identical on paper. Both assign IPs with essentially no reverse DNS — Tencent at 29/30 missing, Alibaba at 30/3…

Tunnels are for dev: why our production webhooks left localhost.run

Tunnels are for dev: why our production webhooks left localhost.run This is the third post in a trilogy I didn't plan. Post #1 was the diagnosis: my…

Network Forensics: Evidence Acquisition (Week 4)

This week, we fovus on the phase of evidence acquisition, focusing on how investigators capture network traffic using physical interception, acquisi…

CompTIA A+ Port Numbers: The Complete Quick-Reference Cheat Sheet (Core 1 220-1101)

Every candidate sitting for the CompTIA A+ Core 1 (220-1101) exam encounters port questions—either directly ( "Which port does LDAPS operate on?" )…

Addressing Uneven Kubernetes Knowledge: Deepening Critical Areas for Platform Engineering Strength

Bridging the Expertise Gap in Kubernetes and Platform Engineering Achieving mastery in Kubernetes and platform engineering demands more than broad f…

Experienced Developer Seeks Freelance Transition Strategies for Web Apps and Shopify/E-commerce Development

The Freelance Transition Challenge: Bridging the Portfolio Gap For experienced developers eyeing the freelance world, the absence of a dedicated por…

Self-hosted HTTP tunnels with SSH and nginx

Windows 11 Dropping Wi-Fi on Boot? Blame Your VPN Kill Switch

Every developer has a familiar morning ritual: power on the workstation, grab a fresh cup of coffee, fire up the terminal, and wait for local contai…