HHugoinhugovalters.hashnode.dev·Jul 27 · 4 min readProxmox SDN: Software-Defined Networking for Multi-Node ClustersI got the call at 2:47 AM. A junior admin had deleted a VNet while five production VMs were running. All of them dropped off the network simultaneously. The /etc/pve/sdn/ directory had no backups. We 00
HHugoinhugovalters.hashnode.dev·Jul 27 · 4 min readDeploying Encrypted DNS Internally: DoH and DoT GuideI was on-call when it happened. 3 AM on a Tuesday, and every single production server in our us-east-1 region started resolving api.internal.example.com to a server in Belarus. Our recursive DNS resol00
HHugoinhugovalters.hashnode.dev·Jul 27 · 3 min readNetwork Segmentation: VLANs and Firewall Rules for ProductionIntroduction: Why Your Flat Network is a Liability I once walked into a post-mortem where a single compromised WordPress plugin led to an attacker pivoting from a public web server to a PCI-compliant 00
HHugoinhugovalters.hashnode.dev·Jul 27 · 4 min readSite-to-Site IPsec: Connecting Offices Without Losing Your MindI have spent a significant portion of my adult life staring at log buffers, watching two expensive routers scream at each other in a language they both ostensibly speak, yet neither understands. There00
HHugoinhugovalters.hashnode.dev·Jul 27 · 3 min readpfSense vs OPNsense: A Pragmatic Comparison for Self-HostersI’ve been running firewalls since the days of m0n0wall on CF cards, and I still remember the sinking feeling at 2 AM when a bad pfSense config push locked me out of a remote office. The Soekris box wa00