Tag: networking
Enabling BMP in Bird 2.17.5
'Claude, fix my prod pipeline. No mistakes.'
The WireGuard Protocol
Peers, cryptokey routing, handshakes, key rotation, and protocol boundaries
WiFi HaLow on Phones
Hold on to your hats, HaLow is here
Fetch Needs Error Codes
HTTP/2 and HTTP/3 have rich, typed error signaling that the Fetch API completely discards. The TC39 error code proposal could fix that.
Home Assistant, Thread & Matter Across Multiple VLANs
Almost every "get Thread/Matter working with Home Assistant" guide ends with the same shrug: "just put all your IoT stuff on the same VLAN as Home Assistant." And sure — that works, and is almost definitely the easier alternative. It also throws away the entire reason a lot of us segment our networks in the first place. My smart home gear is exactly the pile of cheap, chatty, questionably-updated devices I most want to keep away from my main LAN.
Expanding The Social Layer
A protocol is only as alive as the people who use it.
.plan-26-23: Earth Embeddings, Emails Everywhere, and ERRNOOOs
TESSERA on the ESA homepage and at CVPR, GeoTessera 0.9 stabilising onto S3/Zarr, io-uring in OCaml, carbon credits in New Scientist and WSJ, and musings on internet malware again.
Self-hosting email the hard way from your own routable IPv4 block up
How we refreshed self-hosted Recoil email with our own RIPE-allocated IPv4 block, and deployed Postfix/rspamd/Dovecot to get full SPF/DKIM/DMARC deliverability.
Experimental DTLS Support in Node.js
An experimental implementation of the DTLS protocol is coming to Node.js, bringing TLS-equivalent security to datagram-based communication over UDP.
QUIC and HTTP/3 Come To Node.js (finally)
A functional implementation of the QUIC and HTTP/3 protocols has finally landed in Node.js.
Advanced QUIC
This is Part 5 in a series on the new `node:quic` module in Node.js
Teaching libuv's UDP Stack New Tricks
Extending libuv's uv_udp_t with ECN, PMTUD, pktinfo, and GSO/GRO support for QUIC and beyond.
QUIC Endpoints, Sessions, and the QUIC Connection Lifecycle
This is Part 2 in a series on the new `node:quic` module in Node.js
HTTP/3 Over QUIC in Node.js
This is Part 4 in a series on the new `node:quic` module in Node.js
QUIC Streams - Sending and Receiving Data
This is Part 3 in a series on the new `node:quic` module in Node.js
Lastbegeisterung
Burden-enthusiasm
TezCon 2026: Beyond Enshittification
It’s time to plan your journey to TezCon.
Direct USB Network connection RPi and Linux
After deciding to host my own Gitea server, I also wanted to be able to take my repositories on the road with me. And what better device to do this than a Raspberry Pi! I already had a spare Pi 4 with 4GB of RAM just sitting around and plenty of SD cards*. And I had previously tried connecting a Pi via USB to my laptop so I knew I could have it working with a direct connection rather than as a server sitting on the same network. But I quickly found out that things have changed, and previous meth...
QUIC Protocol - Internals
A lower-level implementer-oriented view of QUIC covering wire formats, frame types, TLS 1.3 handshake transcripts, congestion control algorithms, and loss detection logic.
QUIC Protocol — Deep Dive
A comprehensive deep dive into QUIC, the transport protocol behind HTTP/3 — covering its architecture, handshake, streams, connection migration, congestion control, and future directions.
suricata ate all the RAM and the router forgot how to route
load average 30, 96MB free RAM, 1.3GB in swap. the UniFi gateway was swap-thrashing so hard it couldn't serve its own web console.
HTTP/3 vs HTTP/2: When the Upgrade Actually Matters
A practical comparison of HTTP/3 and HTTP/2, covering where QUIC's advantages are real, where HTTP/2 is still fine, and how to decide for your stack.
Setup a thick VNET jail for torrenting on FreeBSD
Create the bridge.
On "networking" in leadership development
Selling exploitation and manipulation as a skill
Taming the Boox Go Color 7 Gen 2: Root, Debloat, and Firewall
How I rooted my Boox eReader, blocked all telemetry to China, and replaced proprietary cloud sync with self-hosted Syncthing—all managed through NixOS.
One Year Of Model Context Protocol Through A Core Maintainer Lens
A core maintainer's reflection on a year of Model Context Protocol, coinciding with the 2025-11-25 specification release and a look at what's next.
Four Ps for Building Massive Collective Knowledge Systems
Design principles for collective knowledge systems—permanence, provenance, permission, and placement—that enable robust networks for evidence-based decision making.
Take Your Network With You
Bring your home network anywhere with the tiny Beryl AX router.
Take Your Network With You
Bring your home network anywhere with the tiny Beryl AX router.
Getting Started with Meshtastic
Dipping my toes into the world of mesh networking.
DIY Workload Identity
Enforce workload identities with IO and your own identity server.
Network Upgrades 2025
It's been just over a year since I last posted my 2024 Network Upgrade post. In that time, my network has undergone several changes. Here are the major updates: Swapped from a UDM Pro to a UCG Fiber. Upgraded my FTTH link from 2Gb to 5Gb! (Hence the upgrade from the UDM Pro) Added a...
Under the hood with Apple's new Containerization framework
Technical deep dive into Apple's new macOS Tahoe containerization framework using Kata Containers and Swift-based implementation.
IO's Arc Reactor is Envoy
Here's why IO builds on Envoy.
A Quick Tour of IO
You're running IO, now what?
Get Started with IO
Here's how previewers can get started running IO.
Your Friendly Neighborhood Network Proxy
I didn't like proxies until I made this one.
Homelab 2.5 Ideas
Jotting down some ideas for improvements to make to my homelab / home network when I move to Puerto Rico.
Updating Athena Queries for Enhanced Blog Traffic Analysis
Expanding on our CloudFront log analysis with new Athena queries to differentiate bots vs humans, analyze external referrers, and get detailed bot traffic insights.
Using non-Talos nodes with a Talos K8s Cluster
A stopgap for joining non-Talos distros to a Talos Kubernetes cluster
Getting Started with Matter and Thread
Every few months my smart home addiction kicks in and I tend to buy another little sensor, light, widget, etc. This time around I decided I wanted to finally get into Matter + Thread. Going into this all I knew was that Matter and Thread were very much hyped IoT communication standards that were supposed to harmonize a lot of splintering of the various ecosystems over the past few years, and I finally started seeing more and more manufacturers launching products that offered support, so my assumption was that many of the early kinks had most likely been worked out already.. 😂
No route to host - Debian testing firewall
Analyzing Blog Traffic with CloudFront Logs and Athena
A detailed guide on setting up CloudFront logging with Athena to analyze blog traffic patterns and user behavior using CDK
Securing API Gateway with Lambda@Edge
A detailed guide on implementing secure API Gateway endpoints using Lambda@Edge for request verification and API key management
Network-wide bullshit-blocking setup with Blocky and Tailscale
I will use an Orange Pi 5 Plus, but any device, including single board computers, should work, as long as they can run the latest stable Debian or Armbian release.
DNS Issues on a Nokia FastMile 5G
Networking
When I set out to give accessibility talks, I never thought I'd meet some of the best people ever