Posted inDatabase
Defeating SQL Injection in MySQL Production using ProxySQL Firewall
A guide to configuring ProxySQL Firewall for MySQL Production. Learn how to use Query Rules to block SQL Injection and set up secure query whitelisting.
Posted inVirtualization
Blocking Country IPs on Proxmox VE with IPSet: Optimizing Firewall and Performance
Learn how to use IPSet on Proxmox VE Firewall to block bulk country IP ranges. Optimize system performance and effectively protect VMs from brute-force attacks.
Posted inVMware
Mastering ESXi Firewall with esxcli: From Manual Administration to Automation
Managing ESXi Firewall via GUI is slow and error-prone. Learn to use esxcli to open ports, block IPs, and professionally automate VMware host security.
Posted inCentos
Mastering nftables on CentOS Stream 9: Replacing iptables for Optimized Firewall Performance
Say goodbye to iptables; nftables is the new standard on CentOS Stream 9. Learn how to optimize your firewall using Sets and Verdict Maps for better system performance.
Posted inNetwork
Transparent Linux Bridge Firewall with nftables: Network Control Without Changing IPs or Topology
A transparent firewall using Linux bridge and nftables lets you control all network traffic without changing IP addresses or the existing topology. The ideal solution when you need to add security to a production system without causing downtime or reconfiguring any running servers.
Posted inNetwork
XDP Linux: Building an Ultra-Fast Packet Filter at the Driver Layer to Block DDoS
XDP (eXpress Data Path) processes and filters packets directly at the NIC driver layer — before they enter the kernel stack — making it 10 to 100 times faster than iptables. This guide covers everything from writing an eBPF program in C, compiling and loading it into the kernel, to managing a real-time IP blocklist with BPF Maps and Python.
Posted inNetwork
Building a Stealth VPN with Xray-core and XTLS-Reality on Linux: Traffic That Looks Like Regular HTTPS
A complete A-to-Z guide to installing Xray-core with XTLS-Reality on a Linux server — generating keypairs, configuring VLESS, setting up the client, and monitoring. VPN traffic looks like ordinary HTTPS and cannot be detected or blocked by DPI.
Posted inVirtualization
Deploy a VyOS Virtual Router on Proxmox/KVM: Firewall, NAT, and Site-to-Site VPN from A to Z
A hands-on guide to deploying a VyOS virtual router on Proxmox or KVM, covering stateful zone-based firewall, NAT masquerade, port forwarding, and IPsec IKEv2 Site-to-Site VPN. Follows a practical workflow from installation to a production-ready lab network.
Posted inNetwork
Mastering hping3: Advanced Techniques for Firewall Bypassing and Deep Network Diagnostics on Linux
Don't be fooled by the Ping command. Learn how to use hping3 to craft custom packets, bypass firewalls, and perform deep network diagnostics like a pro SysAdmin.
Posted inSecurity
Stop “Sneaky” Connections on Linux with OpenSnitch: A Powerful Application-Level Firewall
Don't let apps leak your data without permission. Learn how to use OpenSnitch to control every network connection on Linux and protect your privacy.