DEV Community

ZeroTrust Architect profile picture

ZeroTrust Architect

Network & Security Engineer with over 20 years of experience

Location UK Joined Joined on 

Work

Freelance Network & Security Engineer

Blocking Adult Content at the Proxy Layer: Mandatory HTTPS Enforcement, Category Filtering, and Always-On VPN
goodguy11 profile

Blocking Adult Content at the Proxy Layer: Mandatory HTTPS Enforcement, Category Filtering, and Always-On VPN

#security #networking #linux #selfhosted
Comments
3 min read

Want to connect with ZeroTrust Architect?

Create an account to connect with ZeroTrust Architect. You can also sign in below to proceed if you already have an account.

Create Account
Already have an account? Sign in
Implementing a Three-Zone DMZ With a Single Firewall: iptables Rules, Zone Isolation, and Traffic Flow Analysis
goodguy11 profile

Implementing a Three-Zone DMZ With a Single Firewall: iptables Rules, Zone Isolation, and Traffic Flow Analysis

#security #networking #linux #devops
Comments
3 min read
GDPR Article 32 and NIS2 Article 21: Mapping Cybersecurity Requirements to Concrete Network Controls
goodguy11 profile

GDPR Article 32 and NIS2 Article 21: Mapping Cybersecurity Requirements to Concrete Network Controls

#security #devops #networking #linux
Comments
3 min read
pfSense vs Integrated UTM Appliance: Plugin Dependency Graphs, Update Risk, and When Each Architecture Wins
goodguy11 profile

pfSense vs Integrated UTM Appliance: Plugin Dependency Graphs, Update Risk, and When Each Architecture Wins

#networking #security #selfhosted #linux
Comments
3 min read
Full-Tunnel IPsec VPN for Remote Workers: StrongSwan Config, Split vs Full Tunnel, and Gateway Security Stack
goodguy11 profile

Full-Tunnel IPsec VPN for Remote Workers: StrongSwan Config, Split vs Full Tunnel, and Gateway Security Stack

#security #networking #linux #devops
Comments
3 min read
Enforcing Social Media Blocks at the Proxy Layer: Mandatory Proxy, LDAP Group Policies, and Time-Based ACLs
goodguy11 profile

Enforcing Social Media Blocks at the Proxy Layer: Mandatory Proxy, LDAP Group Policies, and Time-Based ACLs

#security #networking #linux #devops
Comments
3 min read
Reducing Office Bandwidth With Squid Caching, HTB QoS, and Category Filtering: A Technical Walkthrough
goodguy11 profile

Reducing Office Bandwidth With Squid Caching, HTB QoS, and Category Filtering: A Technical Walkthrough

#networking #linux #devops #opensource
Comments
3 min read
BYOD Network Security Without MDM: Zone Isolation, MAC Filtering, and Gateway-Level Controls
goodguy11 profile

BYOD Network Security Without MDM: Zone Isolation, MAC Filtering, and Gateway-Level Controls

#security #networking #devops #linux
Comments
3 min read
IoT Network Isolation: Zone Segmentation, Egress Filtering, and Why Your Smart TV Needs Its Own VLAN
goodguy11 profile

IoT Network Isolation: Zone Segmentation, Egress Filtering, and Why Your Smart TV Needs Its Own VLAN

#security #networking #linux #devops
Comments
4 min read
Network-Level Parental Controls: Enforcing Web Filtering With a Proxy, Firewall Rules, and an Always-On VPN
goodguy11 profile

Network-Level Parental Controls: Enforcing Web Filtering With a Proxy, Firewall Rules, and an Always-On VPN

#security #networking #linux #selfhosted
Comments
5 min read
Host-Based vs Network Firewall: Why Windows Firewall and Windows Defender Are Not Enough on Their Own
goodguy11 profile

Host-Based vs Network Firewall: Why Windows Firewall and Windows Defender Are Not Enough on Their Own

#security #networking #devops #opensource
Comments
4 min read
Home VPN Server: NAT Traversal, DynDNS, Port Forwarding, and IKEv2 Under the Hood
goodguy11 profile

Home VPN Server: NAT Traversal, DynDNS, Port Forwarding, and IKEv2 Under the Hood

#networking #security #linux #selfhosted
Comments
3 min read
Building a UTM From Components vs Deploying an Integrated Appliance: The Engineering Tradeoffs
goodguy11 profile

Building a UTM From Components vs Deploying an Integrated Appliance: The Engineering Tradeoffs

#security #networking #linux #devops
Comments
3 min read
Self-Hosted IPsec VPN: PKI Setup, StrongSwan Config, and Client Provisioning End-to-End
goodguy11 profile

Self-Hosted IPsec VPN: PKI Setup, StrongSwan Config, and Client Provisioning End-to-End

#security #networking #linux #devops
Comments
3 min read
Integrated OS vs Plugin-Based Firewall Architecture: Security Surface and Maintenance Tradeoffs
goodguy11 profile

Integrated OS vs Plugin-Based Firewall Architecture: Security Surface and Maintenance Tradeoffs

#security #networking #linux #devops
Comments
3 min read
DNS Filtering vs Proxy-Based URL Filtering: What Actually Happens at the HTTP Layer
goodguy11 profile

DNS Filtering vs Proxy-Based URL Filtering: What Actually Happens at the HTTP Layer

#security #networking #devops #opensource
Comments
4 min read
HTTP Cache-Control Headers, Squid, and Why Your Gateway Cache Misses More Than You Think
goodguy11 profile

HTTP Cache-Control Headers, Squid, and Why Your Gateway Cache Misses More Than You Think

#networking #webdev #devops #opensource
Comments
3 min read
Traffic Shaping with HTB and SFQ: How QoS Actually Works on Linux
goodguy11 profile

Traffic Shaping with HTB and SFQ: How QoS Actually Works on Linux

#networking #linux #devops #opensource
Comments
3 min read
What is URL Filtering? How It Works and Why It Matters
goodguy11 profile

What is URL Filtering? How It Works and Why It Matters

#cybersecurity #networking #security #webdev
Comments
4 min read
IPsec vs TLS VPN: Protocol Mechanics, Port Behaviour, and When Each One Breaks
goodguy11 profile

IPsec vs TLS VPN: Protocol Mechanics, Port Behaviour, and When Each One Breaks

#security #networking #devops #linux
Comments
3 min read
TLS Handshake to Reverse Proxy: How HTTPS Works End-to-End in a Production Network
goodguy11 profile

TLS Handshake to Reverse Proxy: How HTTPS Works End-to-End in a Production Network

#security #webdev #networking #devops
Comments
3 min read
TLS Interception at the Gateway: Certificate Chains, SNI, and the SSL Pinning Problem
goodguy11 profile

TLS Interception at the Gateway: Certificate Chains, SNI, and the SSL Pinning Problem

#security #networking #webdev #linux
Comments
3 min read
How HTTPS Works: A Simple Explanation of Secure Web Communication
goodguy11 profile

How HTTPS Works: A Simple Explanation of Secure Web Communication

#cybersecurity #networking #security #webdev
Comments
3 min read
IPsec vs SSL VPN: What’s the Difference and Which One Should You Use?
goodguy11 profile

IPsec vs SSL VPN: What’s the Difference and Which One Should You Use?

#cybersecurity #networking #vpn #security
Comments
3 min read
Endian Firewall's Fork Lineage and Feature Gaps: A Technical Assessment
goodguy11 profile

Endian Firewall's Fork Lineage and Feature Gaps: A Technical Assessment

#security #networking #opensource #devops
Comments
2 min read
Smoothwall Express in 2026: What "No Major Release Since 2014" Means for a Security Appliance
goodguy11 profile

Smoothwall Express in 2026: What "No Major Release Since 2014" Means for a Security Appliance

#security #networking #opensource #linux
Comments
3 min read
Untangle's Plugin Architecture: Dependency Compatibility and the True Cost of Modular Pricing
goodguy11 profile

Untangle's Plugin Architecture: Dependency Compatibility and the True Cost of Modular Pricing

#security #networking #devops #opensource
Comments
2 min read
FortiGate ASIC vs Commodity Hardware: Where Dedicated Processing Matters and Where It Doesn't
goodguy11 profile

FortiGate ASIC vs Commodity Hardware: Where Dedicated Processing Matters and Where It Doesn't

#security #networking #devops #hardware
Comments
3 min read
OPNsense Plugin Compatibility on FreeBSD: What Breaks and Why
goodguy11 profile

OPNsense Plugin Compatibility on FreeBSD: What Breaks and Why

#security #networking #opensource #bsd
Comments
3 min read
FreeBSD vs Linux Network Stack for Security Appliances: Kernel Differences That Matter Operationally
goodguy11 profile

FreeBSD vs Linux Network Stack for Security Appliances: Kernel Differences That Matter Operationally

#networking #linux #security #devops
Comments
2 min read
Sophos XGS Feature Architecture: What Requires Proprietary Hardware and What Doesn't
goodguy11 profile

Sophos XGS Feature Architecture: What Requires Proprietary Hardware and What Doesn't

#security #networking #devops #opensource
Comments
2 min read
Cloud-Managed vs On-Premises Network Security: Management Plane Architecture Compared
goodguy11 profile

Cloud-Managed vs On-Premises Network Security: Management Plane Architecture Compared

#networking #security #devops #cloud
Comments
3 min read
Reverse Proxy Internals: Load Balancing Algorithms, Health Checks, and HA with VRRP
goodguy11 profile

Reverse Proxy Internals: Load Balancing Algorithms, Health Checks, and HA with VRRP

#webdev #networking #devops #opensource
Comments
3 min read
IKEv2, ESP, and StrongSwan: Dissecting an IPsec VPN from Handshake to Packet
goodguy11 profile

IKEv2, ESP, and StrongSwan: Dissecting an IPsec VPN from Handshake to Packet

#security #networking #linux #devops
Comments
3 min read
ModSecurity and the OWASP Core Rule Set: How WAF Rules Actually Work
goodguy11 profile

ModSecurity and the OWASP Core Rule Set: How WAF Rules Actually Work

#security #webdev #opensource #devops
Comments
3 min read
What a UTM Actually Does at the Packet Level (And Why Your Router's Firewall Isn't One)
goodguy11 profile

What a UTM Actually Does at the Packet Level (And Why Your Router's Firewall Isn't One)

#security #networking #devops #opensource
Comments
3 min read
Startup Network Security: A Practical Foundation Checklist
goodguy11 profile

Startup Network Security: A Practical Foundation Checklist

#cybersecurity #networking #security #devops
Comments
3 min read
Open Source Firewall for Small Business: What You Should Actually Know
goodguy11 profile

Open Source Firewall for Small Business: What You Should Actually Know

#cybersecurity #networking #security #opensource
Comments
2 min read
Network Security Checklist for Startups: 10 Essential Steps
goodguy11 profile

Network Security Checklist for Startups: 10 Essential Steps

#cybersecurity #networking #security #startup
Comments
3 min read
pfSense vs CacheGuard: Choosing Between Flexibility and Functionality
goodguy11 profile

pfSense vs CacheGuard: Choosing Between Flexibility and Functionality

#networking #security #opensource #selfhosted
Comments 1
3 min read
Self-Hosted VPN: Benefits, Trade-Offs, and When It Makes Sense
goodguy11 profile

Self-Hosted VPN: Benefits, Trade-Offs, and When It Makes Sense

#vpn #cybersecurity #networking #infrastructure
Comments
2 min read
How a VPN Actually Works (Packet-Level Architecture Explained with CacheGuard)
goodguy11 profile

How a VPN Actually Works (Packet-Level Architecture Explained with CacheGuard)

#vpn #networking #cybersecurity #infrastructure
Comments
2 min read
🏠 I Stopped Using Commercial VPNs After Building My Own (Here’s Why)
goodguy11 profile

🏠 I Stopped Using Commercial VPNs After Building My Own (Here’s Why)

#vpn #security #cybersecurity #infrastructure
Comments
2 min read
Most Small Businesses Still Don’t Have a Real Firewall (And It’s a Problem)
goodguy11 profile

Most Small Businesses Still Don’t Have a Real Firewall (And It’s a Problem)

#cybersecurity #networking #linux #opensource
Comments
2 min read
loading...