Redirecting port ranges with nftables, without iptables-translate
A short walk through nat chains, redirect to and why counters are your best debugging tool.
A personal engineering notebook. Mostly Linux, networking, self-hosting and the small tools I write to make them less painful.
Moving certbot from standalone to webroot
Standalone mode is convenient until something else wants port 80. Here is the boring, reliable setup I ended up with.
QUIC, UDP buffers and the sysctls nobody tells you about
net.core.rmem_max, wmem_max, and measuring whether any of it actually matters on a 2 GB VPS.