When setting up a new FreeBSD box, I wanted to configure DNS settings to use the resolver I already set up on the network. The easiest way to set a static DNS resolver (to thwart the dumb ISP router f...

The Quest for Thin Clients Basically everyone I know works on a laptop. When I was a kid, this was a luxury few could afford, and they were rarely purchased by individuals. But things have changed a l...

This weekend, I finally got around to putting that little FreeBSD box to work providing DNS for all machines on the LAN. While nearly all of my web traffic goes through a browser with built-in filters...

I'm working on figuring out what's next for my homelab setup, and since I had vacation this past week, I decided to go for the first piece: a router PC. Not a router as in a sealed piece of hardware, ...

My work at $DAYJOB that involves a lot of work with data pipeline these days. Particularly the design of new and better ones, which help us serve users with better data (more advanced processing, bett...

In my last post, one of the things I glossed over was the TLS termination setup. While there are many ways of doing this, and half a dozen tutorials on most of them, you may remember that my setup on ...

For various reasons, I recently decided to start running a homelab again. In this post I'll give a broad overview of the architecture I settled on, and why I made specific choices. I'll try to keep th...

It's not like the world needs yet another WireGuard tutorial, but I thought I'd write one since one of the top SEO-ranked ones I stumbled upon was pretty low quality, with several obvious errors and o...

DNS is a complex beast, so it's little surprise when I learn something new. Today I learned a bit more about the internals of how DNS works at various privacy-centric providers. It all started a few w...