Junos SRX Security Policies in Real Life: Why Traffic Doesn't Match
Debug SRX policy issues when traffic flows wrong or NAT fails. Covers zone chain, policy hit counters, flow trace, and the top 5 reasons policies never match.
#firewall
9 posts tagged with "firewall"
NAT Logging: Session Tracking for CGNAT and Compliance
Implement NAT session logging on VyOS. Covers connection tracking logs, log analysis, compliance requirements, and why NAT logs are essential for troubleshooting and legal requirements.
DDoS Mitigation at the Edge: Rate Limiting and Traffic Scrubbing
Implement basic DDoS protection on VyOS edge routers. Covers rate limiting, connection limits, SYN flood protection, and why edge mitigation buys time for upstream solutions.
Conntrack Deep Dive: Connection Tables, Limits, and Debugging
Master VyOS connection tracking internals. Covers conntrack tables, tuning limits, timeout configuration, debugging full tables, and why conntrack is the invisible stateful firewall engine.
High Availability: VRRP + State Sync (What You Can and Can't Do)
Honest guide to VyOS high availability using VRRP and conntrack sync. Covers failover configuration, state synchronization, what actually fails over and what doesn't, testing procedures, and why HA is a set of failure scenarios, not a checkbox.
Policy-Based Routing on VyOS: Practical Patterns for Split Routing
How to route specific traffic through different gateways on VyOS. Covers routing by source, destination, domain, and application with real-world examples like split-tunnel VPN.
IPv6 at Home: RA, DHCPv6, and Why Your Firewall Keeps Breaking It
Practical IPv6 configuration on VyOS for home networks. Covers Router Advertisements, DHCPv6, stateless vs stateful addressing, firewall rules, and debugging ND/RA issues.
VyOS Isn't Scary: Building Your First Production-Ready Router
A practical guide to setting up VyOS from scratch. Covers WAN/LAN configuration, NAT, DHCP, DNS forwarding, and basic firewall rules with validation at every step.
Post-Install Baseline: Users, SSH, Firewall, Updates, and Hardening
Essential Proxmox security hardening after installation. Covers user management, SSH key-only access, host firewall configuration, automatic updates, and why security is easier to implement now than later.