Posts
Practical guides and field notes on NetScaler, WAF, cloud security, and infrastructure hardening.
Should You Block ICMP? The Wrong Question to Ask
A pragmatic look at ICMP filtering. Why blocking all ICMP causes silent network failures, breaks PMTUD, and what you should do instead.
Cloud Free Tier Overview: A Pragmatic Guide
Navigating cloud free tiers—what is actually useful, what is a marketing trap, and where to build your stack.
Shell Scripting for SysAdmins: From Basics to Automation
A practical guide to shell scripting, covering variables, control structures, and automation for system administrators.
TrustOps in Action: Bridging the Dissonance Between Cyber and Business
A methodology to resolve the growing dissonance between organizations and their cyber security departments by shifting from 'blocker' to 'trusted advisor'.
DNS Fundamentals – A Systems Perspective
DNS isn't just a phonebook. It's the most critical part of your infra stack. Here's how it works and how to debug it when it breaks.
NetScaler KCD Configuration Guide (Kerberos SSO Step by Step)
A practical step-by-step guide to configure Kerberos Constrained Delegation (KCD) on NetScaler for backend SSO with Active Directory.
JWT Explained Simply
A practical guide to JWTs covering structure, trust model, common pitfalls, and a simple hardening checklist.
My Security and Privacy Stack – 2025
An in-depth look at my 2025 security and privacy stack, focusing on a balanced approach to protection and simplicity through Authentik, Tailscale, and Cloudflare.
My Productivity and Automation Stack – 2025
A simple 2025 productivity stack centered on Obsidian, Reminders, Miniflux, Linkwarden, and n8n automations designed for clarity and low mental overhead.
My Infrastructure Stack – 2025
A look at the cloud and self-hosted infrastructure behind my personal stack in 2025, including containers, networking, monitoring, and access control.