Cisco
Cisco routing, switching, SD-WAN, observability, design, and troubleshooting notes for practical infrastructure work.
SD-WAN Assurance: What to Monitor Before Blaming the ISP
An SD-WAN assurance runbook for separating ISP, underlay, overlay, policy, DNS, SaaS, and application problems before escalating.
EVPN/VXLAN Lab First: Build a Cisco IOS XE Fabric Before Touching Production
Plan EVPN/VXLAN tests only after confirming the exact Cisco platform and image support the required features. Validate underlay, overlay and denied paths separately, with representative hardware checks before production.
RPKI, IRR, and ROA MaxLength: Routing Hygiene for Enterprises That Own Prefixes
A routing-hygiene guide for enterprises that announce public prefixes, covering RPKI ROAs, IRR objects, ROA maxLength risk, and provider turn-up checks.
DNS Privacy vs DNS Filtering: Stop Mixing Up the Jobs
A DNS guide explaining the difference between encrypted DNS, DNSSEC, Protective DNS, malware filtering, parental controls, and resolver bypass.
Moving Beyond SMS MFA: A Household Migration Plan
A household MFA migration plan for moving from SMS codes to authenticator apps, passkeys, security keys, recovery codes, and carrier protections.
Email Is the Root Account: Lock It Down Before Anything Else
Protect the mailbox that receives high-impact account resets and map its actual recovery dependencies. Review hidden access and independent fallback methods without assuming every linked service uses the same recovery model.
What to Do When a Device Hits CISA KEV
When a KEV-listed vulnerability may affect your device, confirm model, build, feature and exposure. Preserve useful evidence, contain applicable risk and follow supported remediation without assuming the device is already compromised.
Edge Device Patch Priority Playbook
A patch-priority playbook for routers, firewalls, VPN gateways, NAS appliances, and other internet-facing edge devices.
Homelab SSO: Authentik vs Authelia vs Pocket ID
A practical homelab SSO comparison covering Authentik, Authelia, Pocket ID, OIDC, SAML, proxy auth, passkeys, MFA, and recovery planning.
Container Security for Normal Homelabs
A normal-person Docker security guide for exposed ports, privileged containers, Docker socket risk, secrets, rootless mode, user namespaces, and backups.