Topic
11 matching entries across Articles, TIL and Projects.
Long-form writing tagged Networking.
Building a WireGuard tunnel with a real kill switch on a device with no package manager and a read-only root: the bootstrap paradox, the unit-ordering typo systemd accepts silently, and why a watchdog that heals a fault also hides it.
NO_CLIENT_SITE entries in Netlogon logs are useful evidence that client networks are not mapped cleanly to Active Directory sites. PowerShell can turn the logs into a subnet-hygiene report.
When private sites and DNS exceptions multiply, WARP device-profile configuration becomes data. Source control can become the input and PowerShell the generator.
Static IP and subnet rules become fragile when SaaS platforms and CDNs move underneath you. Domain-aware egress policy aligns network controls with application intent.
Short notes and fixes tagged Networking.
Uncommenting the stock localnet ACL so a lab network can reach a proxy also admits every other private range, including the wifi the laptop happens to be sitting on.
A service bound to 0.0.0.0 will not accept connections arriving inside a VRF unless the kernel is told to allow it. The listener looks correct, the route is correct, and the connection is refused.
When Terraform already knows the cloud subnets, those values can become inputs to WARP routing instead of being copied into a second manually maintained list.
A hostname can continue returning NXDOMAIN after its DNS record exists if another resolver layer has cached the earlier negative response.
Cloud and SaaS services move between addresses. Policy often expresses intent more accurately when it follows the application hostname.
DNS resolution and packet routing are related, but a WARP configuration often needs you to reason about them separately.
Projects and implementation patterns tagged Networking.
Turning an undocumented Raspberry Pi media box into something that can be rebuilt from a written kit: a full configuration survey, systemd-managed networking with a fail-closed tunnel, and a verification checklist that tests the failure path.
