Building a Router and Firewall with OPNsense
Replace your ISP router with a real firewall: full visibility into your network's traffic, VLAN segmentation, and rules you actually control instead of whatever…
Advanced
4 h
$100
Runbook: Diagnosing Network Problems with Packet Captures
When 'the network is slow' isn't good enough to go on -- a repeatable process for capturing traffic with tcpdump and reading it in Wireshark to find the actual…
Intermediate
45 min
Free
Network-Wide Ad Blocking with Pi-hole
Block ads and trackers for every device on your network at the DNS level, with no per-device app or browser extension, by making Pi-hole your network's DNS…
Beginner
1 h
Free
Caddy vs. Traefik vs. Nginx Proxy Manager
Three reverse proxies that solve the same problem -- routing hostnames to the right service with real HTTPS -- compared on config model, automation, and how…
Beginner
15 min
Free
Reverse Proxy with Wildcard HTTPS on Internal Names
Give every self-hosted service a real, browser-trusted HTTPS URL like jellyfin.home.example.com, using a wildcard certificate and split-horizon DNS -- no port…
Intermediate
1.5 h
$15
A Routing Protocol Lab with Containerlab and FRRouting
Build a virtual network of routers running real OSPF and BGP, entirely in containers on one machine -- and watch routes actually propagate, fail over, and…
Advanced
2.5 h
Free
Mesh VPN with Tailscale
Connect all your devices into one private mesh network in minutes, with no port forwarding and no manual key management -- the trade-off being a third party in…
Beginner
30 min
Free
Recursive, Filtered DNS at Home
Run Unbound as your own recursive resolver behind Pi-hole, so your DNS queries go straight to the root servers instead of through a third party's resolver.
Intermediate
1 h
Free
Segmenting Your Home Network with VLANs
Split one flat network into trusted, IoT, guest, and management VLANs on OPNsense, with firewall rules that actually enforce isolation between them -- not just…
Intermediate
3 h
Free
How VLANs, Trunks, and Tagging Actually Work
The frame-by-frame explanation of what a VLAN tag actually is, why a trunk port is different from a normal one, and the mistake that breaks isolation even when…
Beginner
20 min
Free
Remote Access with WireGuard
Reach your home network securely from anywhere with a self-managed WireGuard tunnel -- and know when a managed mesh VPN or plain port forwarding would actually…
Intermediate
1.5 h
Free