IPv6 Explained: SLAAC and Neighbor Discovery
IPv6 replaces ARP with NDP and lets devices configure addresses without a server. Here's how Neighbor Discovery, SLAAC, and DHCPv6 work together.
IPv6 replaces ARP with NDP and lets devices configure addresses without a server. Here's how Neighbor Discovery, SLAAC, and DHCPv6 work together.
IPv6 replaces 32-bit addresses with 128-bit ones — but the change goes deeper than size. Here's how IPv6 addresses are structured, what the different types mean, and how subnetting works.
Unencrypted DNS leaks every domain you visit to your ISP and any on-path observer. Here's how DNS-over-TLS, DNS-over-HTTPS, and DNS-over-QUIC fix that — and how they differ.
XGS-PON is the 10-gigabit symmetric fiber standard behind most new FTTH deployments. This post covers the full stack — physical architecture, wavelength multiplexing, upstream TDMA, PLOAM registration, GEM port encapsulation, T-CONT QoS, and dynamic bandwidth allocation.
Three settings that most people leave on auto — and shouldn't. Here's what transmit power, channel width, and channel selection actually do, and how they interact.
Multi-Link Operation is the biggest architectural change in WiFi 7. Here's what it actually does, how the three modes differ, and what it requires.
Sticky clients, band steering, and why 802.11k/r/v are the right tools. How APs guide clients between radios and access points — and what to do when the defaults cause problems.
WPA3 fixes real weaknesses in WPA2 — but not the ones most people think. Here's what SAE, Protected Management Frames, and OWE actually do under the hood.
Expose the Traefik dashboard over HTTPS, lock it down with your existing middlewares, and query the API from the terminal.
WiFi is a shared medium — every device on a channel competes for the same airtime. Here's how CSMA/CA manages that contention, how OFDMA in WiFi 6 changes the model, and how WiFi 7 pushes further with Multi-RU and Preamble Puncturing.
Protect your homelab services with IPAllowList, BasicAuth, and security headers — without touching the app.
Install Traefik as a reverse proxy on bare metal Linux — covering binary install, systemd service, Cloudflare DNS challenge, and dynamic config.
Keep your Cloudflare DNS records in sync with your dynamic home IP using a Cloudflare Worker — no third-party DDNS service required.
Configure a WireGuard VPN server on a MikroTik router to enable secure, encrypted remote access to your homelab network from any device.
Monitor your GL.iNet OpenWRT router with Prometheus node metrics and Grafana Alloy to forward syslog events to Loki for full observability.
Monitor your Traefik reverse proxy with Prometheus metrics, Loki access logs, and Grafana dashboards for full request-level observability.
Forward UniFi syslog events to Loki using Grafana Alloy for centralized log collection and analysis in your homelab observability stack.
Capture network packets remotely using Wireshark over SSH — no local install needed on the target host, ideal for homelab troubleshooting.
Configure your travel router for secure, reliable internet on the go — covering VPN setup, Wi-Fi settings, and network isolation for public networks.
Set up a VyOS router for your home network with full control over firewall rules, VLANs, and routing — enterprise-grade networking, open-source.
Monitor Tailscale client traffic and connection metrics using Prometheus to gain real-time visibility into your secure overlay network.
Configure a MikroTik router from scratch for your homelab — covering initial setup, VLANs, firewall rules, and DHCP for a secure network.
Set up Traefik as a reverse proxy with Docker and Let's Encrypt — covering installation, routing, TLS, and middleware for your homelab.