Tag: networking
Home Assistant, Thread & Matter Across Multiple VLANs
Almost every "get Thread/Matter working with Home Assistant" guide ends with the same shrug: "just put all your IoT stuff on the same VLAN as Home Assistant." And sure — that works, and is almost definitely the easier alternative. It also throws away the entire reason a lot of us segment our networks in the first place. My smart home gear is exactly the pile of cheap, chatty, questionably-updated devices I most want to keep away from my main LAN.
Expanding The Social Layer
A protocol is only as alive as the people who use it.
.plan-26-23: Earth Embeddings, Emails Everywhere, and ERRNOOOs
TESSERA on the ESA homepage and at CVPR, GeoTessera 0.9 stabilising onto S3/Zarr, io-uring in OCaml, carbon credits in New Scientist and WSJ, and musings on internet malware again.
Self-hosting email the hard way from your own routable IPv4 block up
How we refreshed self-hosted Recoil email with our own RIPE-allocated IPv4 block, and deployed Postfix/rspamd/Dovecot to get full SPF/DKIM/DMARC deliverability.
Experimental DTLS Support in Node.js
An experimental implementation of the DTLS protocol is coming to Node.js, bringing TLS-equivalent security to datagram-based communication over UDP.
QUIC Streams - Sending and Receiving Data
This is Part 3 in a series on the new `node:quic` module in Node.js
HTTP/3 Over QUIC in Node.js
This is Part 4 in a series on the new `node:quic` module in Node.js
Advanced QUIC
This is Part 5 in a series on the new `node:quic` module in Node.js
QUIC and HTTP/3 Come To Node.js (finally)
A functional implementation of the QUIC and HTTP/3 protocols has finally landed in Node.js.
QUIC Endpoints, Sessions, and the QUIC Connection Lifecycle
This is Part 2 in a series on the new `node:quic` module in Node.js
Teaching libuv's UDP Stack New Tricks
Extending libuv's uv_udp_t with ECN, PMTUD, pktinfo, and GSO/GRO support for QUIC and beyond.
TezCon 2026: Beyond Enshittification
It’s time to plan your journey to TezCon.
Direct USB Network connection RPi and Linux
After deciding to host my own Gitea server, I also wanted to be able to take my repositories on the road with me. And what better device to do this than a Raspberry Pi! I already had a spare Pi 4 with 4GB of RAM just sitting around and plenty of SD cards*. And I had previously tried connecting a Pi via USB to my laptop so I knew I could have it working with a direct connection rather than as a server sitting on the same network. But I quickly found out that things have changed, and previous meth...
QUIC Protocol - Internals
A lower-level implementer-oriented view of QUIC covering wire formats, frame types, TLS 1.3 handshake transcripts, congestion control algorithms, and loss detection logic.
QUIC Protocol — Deep Dive
A comprehensive deep dive into QUIC, the transport protocol behind HTTP/3 — covering its architecture, handshake, streams, connection migration, congestion control, and future directions.
suricata ate all the RAM and the router forgot how to route
load average 30, 96MB free RAM, 1.3GB in swap. the UniFi gateway was swap-thrashing so hard it couldn't serve its own web console.
HTTP/3 vs HTTP/2: When the Upgrade Actually Matters
A practical comparison of HTTP/3 and HTTP/2, covering where QUIC's advantages are real, where HTTP/2 is still fine, and how to decide for your stack.
Four Ps for Building Massive Collective Knowledge Systems
Design principles for collective knowledge systems—permanence, provenance, permission, and placement—that enable robust networks for evidence-based decision making.
Take Your Network With You
Bring your home network anywhere with the tiny Beryl AX router.
Take Your Network With You
Bring your home network anywhere with the tiny Beryl AX router.
Getting Started with Meshtastic
Dipping my toes into the world of mesh networking.
DIY Workload Identity
Enforce workload identities with IO and your own identity server.
Network Upgrades 2025
It's been just over a year since I last posted my 2024 Network Upgrade post. In that time, my network has undergone several changes. Here are the major updates: Swapped from a UDM Pro to a UCG Fiber. Upgraded my FTTH link from 2Gb to 5Gb! (Hence the upgrade from the UDM Pro) Added a...
Under the hood with Apple's new Containerization framework
Technical deep dive into Apple's new macOS Tahoe containerization framework using Kata Containers and Swift-based implementation.
Your Friendly Neighborhood Network Proxy
I didn't like proxies until I made this one.
Homelab 2.5 Ideas
Jotting down some ideas for improvements to make to my homelab / home network when I move to Puerto Rico.
Getting Started with Matter and Thread
Every few months my smart home addiction kicks in and I tend to buy another little sensor, light, widget, etc. This time around I decided I wanted to finally get into Matter + Thread. Going into this all I knew was that Matter and Thread were very much hyped IoT communication standards that were supposed to harmonize a lot of splintering of the various ecosystems over the past few years, and I finally started seeing more and more manufacturers launching products that offered support, so my assumption was that many of the early kinks had most likely been worked out already.. 😂
No route to host - Debian testing firewall
DNS Issues on a Nokia FastMile 5G
Networking
When I set out to give accessibility talks, I never thought I'd meet some of the best people ever
SSH saga
Complete SSH setup guide: key pairs, authorized_keys, sshd_config, ssh_config, known_hosts, agent forwarding, and hardening for secure remote access.
How to use Cloudflare Warp with a UDM Pro
If you’re considering using Cloudflare Wrap for specific machines on your network, you can easily install the Warp client directly on them. It supports various operating systems, including Windows, Linux, Mac, iOS, and Android. However, if you need to use it on devices that aren’t compatible with the client installation, for example, NAS Devices or...
Writing a circuit breaker in Go
Build a production-ready circuit breaker in Go from scratch with closed, open, and half-open states to prevent cascading failures.
Notes on building event-driven systems
Deep dive into event-driven architecture patterns. Learn publish-subscribe, CQRS, outbox pattern, eventual consistency, and handling microservice coupling.
HTTP requests via /dev/tcp
Make raw HTTP requests with Bash's /dev/tcp file descriptor. Build health check scripts without curl or wget using TCP socket connections.
The Beauty Of Having A Pi-hole
Why Pi-hole, the Raspberry Pi DNS sinkhole, is worth running at home to block trackers, ads, and analytics endpoints across every device on the network.
Build a reverse ssh tunnel reverse proxy for (not) fun and (not) profit
Building Cross-Platform Offline-First Apps with Bluetooth Low Energy
Protobuffed contracts
Define service contracts with Protocol Buffers for non-gRPC systems. Generate serializers, maintain self-documented APIs, and ensure cross-language compatibility.
Some network Upgrades going on
I’m currently in the midst of a significant network upgrade for the CloudShed. I’ve purchased two Ubiquiti Unifi Hi-Capacity Aggregation Switches, a 24-port Switch Pro POE, a Switch Enterprise 8 PoE, a couple of U7 Pro Access Points, and a U6 In-wall Access Point. The two Aggregation Switches each have four 25Gb ports and 28...