VPN & WireGuard
WireGuard Complete Setup Guide
Launch a self-hosted WireGuard VPN on a private VPS with full configuration, firewall rules, and leak testing.
🌐 Network Security Guides
VPNs, Tor, DNS privacy, and router-level protections
VPN & WireGuard
Tor vs VPN: Threat Model Comparison
When to use Tor, when to use a VPN, and why combining them requires careful configuration. Real-world latency and trust trade-offs.
VPN & WireGuard
Public Wi-Fi Security: Captive Portals, Evil Twins & VPN Hardening
Detect rogue access points, harden VPN against captive portals, MAC randomization, and DNS-over-HTTPS fallback on hostile networks.
Tor & Onion Services
Ultimate Tor Privacy Guide
Complete Tor ecosystem: Browser configuration, bridges, hidden services, circuit verification, and safety practices for maximum anonymity.
Tor & Onion Services
Tor Bridges: Snowflake, obfs4 & Meek Configuration
Bypass Tor censorship with pluggable transports. Snowflake, obfs4, meek-azure, and custom bridge lines. Bridge distribution and verification.
Tor & Onion Services
Run a Tor Relay on Raspberry Pi
Deploy a middle/guard/exit relay on Pi 4/5: Nyx monitoring, bandwidth shaping, ORPort/DirPort, and relay lifecycle management.
Tor & Onion Services
Whonix Gateway-Workstation Routing
Isolate Tor traffic in a Whonix VM pair. Gateway enforces all traffic through Tor; Workstation has no direct network access. Verification and leak tests.
Tor & Onion Services
Onion Services v3: Hidden Service Deployment
Deploy v3 onion services with client authentication, single onion balance, and stealth authorization. Nginx, SSH, and custom apps over Tor.
DNS Privacy
DNS Security: Configuring DNS-over-HTTPS & DNS-over-TLS
Protect your browsing history from ISP snooping by routing DNS queries through secure, encrypted DoH and DoT resolvers.
DNS Privacy
Ultimate DNS Privacy Guide
DNS-over-HTTPS, DNS-over-TLS, Quad9, Cloudflare DNS, and local resolvers with leak testing and configuration verification.
DNS Privacy
Pi-hole Setup: Network-Wide Ad & Tracker Blocking
Deploy Pi-hole with Unbound recursive resolver, DoH upstream, regex blocklists, and client-specific group management.
Router & Network
Router Hardening: OpenWrt, Firewall & VLAN Segmentation
OpenWrt hardening: firewall zones, VLANs for IoT/guest, DNS hijacking prevention, and WireGuard site-to-site tunnels.
Router & Network
Nginx Proxy Manager: SSL, Access Lists & Rate Limiting
Reverse proxy with Let's Encrypt automation, IP allowlists, geographic blocking, and custom error pages for self-hosted services.
IPv6 & Leak Protection
IPv6 Leak Prevention: VPN, Tor & System Configuration
Disable IPv6 where unsupported, configure ULA prefixes, and verify no IPv6 traffic bypasses your VPN or Tor tunnel.