IPv6 Explained: SLAAC and Neighbor Discovery
IPv6 replaces ARP with NDP and lets devices configure addresses without a server. Here's how Neighbor Discovery, SLAAC, and DHCPv6 work together.
10 min
ipv6
Networking
23 pages
IPv6 Explained: Addressing
IPv6 replaces 32-bit addresses with 128-bit ones — but the change goes deeper than size. Here's how IPv6 addresses are structured, what the different types mean, and how subnetting works.
7 min
ipv6
Encrypted DNS: DoH, DoT, and DoQ Explained
Unencrypted DNS leaks every domain you visit to your ISP and any on-path observer. Here's how DNS-over-TLS, DNS-over-HTTPS, and DNS-over-QUIC fix that — and how they differ.
6 min
dns
XGS-PON Explained
XGS-PON is the 10-gigabit symmetric fiber standard behind most new FTTH deployments. This post covers the full stack — physical architecture, wavelength multiplexing, upstream TDMA, PLOAM registration, GEM port encapsulation, T-CONT QoS, and dynamic bandwidth allocation.
7 min
fiber
pon
isp
WiFi Explained: Transmit Power, Channel Width, and Channel Selection
Three settings that most people leave on auto — and shouldn't. Here's what transmit power, channel width, and channel selection actually do, and how they interact.
7 min
wifi
wifi7
WiFi Explained: How MLO Works
Multi-Link Operation is the biggest architectural change in WiFi 7. Here's what it actually does, how the three modes differ, and what it requires.
8 min
wifi
wifi7
WiFi Explained: Roaming and Client Management
Sticky clients, band steering, and why 802.11k/r/v are the right tools. How APs guide clients between radios and access points — and what to do when the defaults cause problems.
11 min
wifi
wifi7
WiFi Explained: WPA3, SAE, and PMF
WPA3 fixes real weaknesses in WPA2 — but not the ones most people think. Here's what SAE, Protected Management Frames, and OWE actually do under the hood.
7 min
wifi
Traefik Essentials: Dashboard & API
Expose the Traefik dashboard over HTTPS, lock it down with your existing middlewares, and query the API from the terminal.
3 min
traefik
WiFi Explained: How Devices Share the Air
WiFi is a shared medium — every device on a channel competes for the same airtime. Here's how CSMA/CA manages that contention, how OFDMA in WiFi 6 changes the model, and how WiFi 7 pushes further with Multi-RU and Preamble Puncturing.
11 min
wifi
wifi7
Traefik Essentials: Middlewares
Protect your homelab services with IPAllowList, BasicAuth, and security headers — without touching the app.
5 min
traefik
Traefik Essentials: Bare Metal Install
Install Traefik as a reverse proxy on bare metal Linux — covering binary install, systemd service, Cloudflare DNS challenge, and dynamic config.
5 min
traefik
cloudflare
Build Your Own Cloudflare DDNS Updater
Keep your Cloudflare DNS records in sync with your dynamic home IP using a Cloudflare Worker — no third-party DDNS service required.
3 min
cloudflare-workers
WireGuard VPN Server on MikroTik
Configure a WireGuard VPN server on a MikroTik router to enable secure, encrypted remote access to your homelab network from any device.
4 min
mikrotik
wireguard
vpn
Monitoring GL.iNet with Grafana
Monitor your GL.iNet OpenWRT router with Prometheus node metrics and Grafana Alloy to forward syslog events to Loki for full observability.
4 min
gl-inet
prometheus
loki
alloy
grafana
openwrt
Traefik Essentials: Monitoring with Grafana, Prometheus & Loki
Monitor your Traefik reverse proxy with Prometheus metrics, Loki access logs, and Grafana dashboards for full request-level observability.
3 min
traefik
prometheus
grafana
loki
Unifi Syslog with Alloy and Loki
Forward UniFi syslog events to Loki using Grafana Alloy for centralized log collection and analysis in your homelab observability stack.
7 min
loki
alloy
unifi
Remote Packet Capture with Wireshark
Capture network packets remotely using Wireshark over SSH — no local install needed on the target host, ideal for homelab troubleshooting.
1 min
docker
Setting Up Your Travel Router
Configure your travel router for secure, reliable internet on the go — covering VPN setup, Wi-Fi settings, and network isolation for public networks.
4 min
gl-inet
openwrt
Setting Up a VyOS Router
Set up a VyOS router for your home network with full control over firewall rules, VLANs, and routing — enterprise-grade networking, open-source.
13 min
vyos
Monitoring Tailscale Clients with Prometheus
Monitor Tailscale client traffic and connection metrics using Prometheus to gain real-time visibility into your secure overlay network.
4 min
prometheus
tailscale
grafana
Setting Up a MikroTik Router
Configure a MikroTik router from scratch for your homelab — covering initial setup, VLANs, firewall rules, and DHCP for a secure network.
7 min
mikrotik
Traefik Essentials: Reverse Proxy with Docker & Let's Encrypt
Set up Traefik as a reverse proxy with Docker and Let's Encrypt — covering installation, routing, TLS, and middleware for your homelab.
3 min
traefik
cloudflare