Local AI Operations
Secure A LAN Model Server: Ollama And LM Studio Across VLANs
Define allowed clients, authentication and resource limits before exposing Ollama or LM Studio across VLANs. Evaluate each product's controls separately and check that direct backend access cannot bypass the intended path.
Coding Agents In Docker Sandboxes: Test The Boundary
Distinguish Docker Sandboxes from ordinary containers before assessing a coding agent. Review mounts, credentials, sockets and network controls with harmless boundary tests, without claiming isolation makes escape impossible.
Why Your Local Model Server Fails On User Two
Diagnose overlapping model requests through latency, queueing, failures and memory use. Compare consistent prompt workloads and cache conditions before setting admission limits from single-user throughput or another server's benchmark.
Open WebUI Security Baseline: Patch, Isolate, And Test Tool Permissions
Assess Open WebUI patch scope and ordinary-user access to chats, files, retrieval collections and tools. Test backend denials separately from visible interface controls, using synthetic data and harmless actions.




