This article walks through the entire H3C device family, covering model selection, initial console setup, VLAN and interface configuration, static and OSPF routing, NAT and VPN deployment, firewall ACLs and security zones, plus a handy troubleshooting command cheat‑sheet for network engineers.
This article shares ten years of ops experience and walks through the full lifecycle of VPN deployment—from OpenVPN, WireGuard, and IPsec/IKEv2 installation on Linux to hardware VPN vendor comparison and an in‑depth SD‑WAN technology overview—helping enterprises select the most suitable solution for their network, security, and cost requirements.
A critical authentication‑bypass flaw (CVE‑2026‑50751, CVSS 9.3) in Check Point's deprecated IKEv1 VPN was actively exploited by the Qilin ransomware gang for over a month before a patch was released, affecting numerous gateway versions and prompting urgent mitigation guidance.
The article compares three internal‑network penetration methods—frp, WireGuard, and Tailscale—by outlining their architectures, deployment steps on Linux and Windows, configuration details, troubleshooting tips, performance measurements, and recommending suitable scenarios for individuals, teams, and enterprises.
This guide explains the three main obstacles Chinese users face when accessing Claude AI—network restrictions, account registration, and payment limitations—and provides step‑by‑step instructions, subscription alternatives, API usage via Code80, and risk‑mitigation tips for stable operation.
A curated roundup of recent tech developments covering an open‑source Linux Teams client, a profit‑margin primer, a showdown between traditional machine learning and prompt engineering, Google’s near‑perfect handwriting model, VPN legislation concerns, a classic game anniversary, Go’s 16‑year milestone, a TCP deep‑dive, and an investigation into pressure on Archive.today.
This tutorial walks you through installing ocserv, creating a CA and server certificates, configuring ocserv settings, adjusting kernel parameters, setting up iptables firewall rules, managing VPN users, and controlling the ocserv service on a CentOS server.
The article explains what a VPN is, clarifies its legal status in various countries, debunks common myths about privacy, describes how VPNs act as encrypted proxies requiring trust in providers, and offers guidance on selecting a reliable service or building your own.
This guide bundles the 50 most essential Huawei USG firewall commands into a concise cheat sheet, covering basic setup, security zones, NAT, VPN, high availability, and advanced protection, enabling operators to configure devices and policies quickly while adhering to best‑practice principles.
Learn how to securely reach internal corporate services by combining VPN, bastion host, and SSH tunneling, covering core concepts, tunnel types, practical use cases like database and remote desktop access, detailed configuration steps, security best practices, and troubleshooting tips.
This guide walks you through installing OpenVPN on a public cloud, setting up Easy‑RSA for certificate management, configuring the server and client, creating authentication scripts, and connecting Windows or macOS clients, complete with commands and configuration examples.
This tutorial explains how to install, configure, and run OpenVPN on Linux, covering VPN concepts, types, OpenVPN features, server‑side certificate creation, key generation, configuration files, and client setup, with step‑by‑step commands and troubleshooting tips for secure remote access.
This guide walks through macOS network configuration on a MacBook Pro M1, covering Wi‑Fi advanced settings, TCP/IP fundamentals such as DHCP, IP addressing and subnet masks, NAT translation, routing tables, DNS servers, proxy types, VPN (L2TP) setup, SSH usage, and Ethernet interface details.
This tutorial walks you through installing ocserv on CentOS, creating a CA and server certificates, configuring routing groups and ocserv.conf, setting up sysctl and iptables firewall rules, managing VPN users, and controlling the service with occtl commands.
This step‑by‑step guide shows how to install OpenVPN on a public‑cloud Linux host, generate CA and server certificates with Easy RSA, configure the OpenVPN server, create a user authentication script, and set up matching client configurations for secure VPN access.
This tutorial explains what a VPN is, outlines its two main types, introduces OpenVPN, and provides detailed, command‑line instructions for installing, configuring, and testing both the OpenVPN server and client on a Linux environment.
This guide walks you through installing Easy‑RSA, generating CA, server and client certificates, configuring OpenVPN, enabling IP forwarding, adjusting firewalls, and setting up client connections on Linux, macOS and Windows, providing a complete end‑to‑end VPN deployment solution.
This article explains VPN technology and outlines four common VPN types—IPSec, SSL/TLS, PPTP, and L2TP/IPSec—detailing their modes, advantages, and security considerations for remote access and site‑to‑site networking, and also compares ease of deployment versus security risks, helping readers choose the appropriate solution for their network environment.
This guide walks through deploying a lightweight K3s cluster unified with virtual machines using Kube‑OVN for multi‑tenant VPC isolation, configuring shared internet via VPN, installing cloud‑hypervisor, setting up Multus for multi‑NIC containers, and provisioning a management web‑app with Tomcat and OpenVPN, providing a complete cloud‑native lab environment.
This guide walks Linux system administrators through essential network interface commands—such as ifconfig, ip, route, netstat, traceroute, ping, ss, nmcli, iw, ethtool, firewall-cmd, and iptables—providing clear syntax, practical examples, and tips for configuring IP addresses, routes, DNS, VPNs, and firewall rules.
This article explains NFV (Network Function Virtualization) concepts and demonstrates how to create virtual network types—VLAN, VPN, vRouter, and vFirewall—using code examples in Python, Java, Go, and C++ for flexible, elastic network deployment.
This article provides a thorough walkthrough of the nmcli command-line tool on Linux, covering installation, basic usage, managing Ethernet, Wi‑Fi, and VPN connections, advanced batch configurations, scripting automation, and useful aliases, complete with practical code examples for each scenario.
NetBird is an open‑source, WireGuard‑based network management platform that creates secure, direct encrypted tunnels between computers, devices, and servers without a central VPN, supporting cloud, on‑premise, edge and container environments, and offers quick deployment via simple installation steps on Linux and macOS.
This article explains the concept and practical applications of forward proxy, outlines its benefits for enterprise network security and access control, compares it with reverse proxy, and provides detailed Nginx configuration examples—including how to expose the client’s real IP—along with common tools and real‑world scenarios.
This article traces the evolution of wide‑area network technologies, explains MPLS label‑stack architecture and forwarding mechanisms, details MPLS VPN (L2VPN/L3VPN) components, routing information bases, RD/RT fields, and outlines classic and inter‑domain deployment models for modern carrier networks.
Recent users reported that Firefox displays intrusive full‑screen VPN ads that freeze the browser, violate Mozilla’s privacy principles, and sparked community backlash, leading to a bug‑tracking saga and eventual removal of the ads with suggested ad‑blocking workarounds.
This comprehensive guide explains the IPSec security suite—including AH, ESP, and SA protocols—covers encapsulation modes, NAT‑Traversal, MTU fragmentation issues, VPN deployment scenarios, Virtual Tunnel Interfaces, and provides step‑by‑step StrongSwan configuration and testing procedures.
This article explains what a VPN is, how it works, its legal status across countries, common misconceptions about privacy, its role as a proxy, and tips for choosing a trustworthy VPN provider.
This article explains how an improperly configured MTU in a VPN environment caused MySQL SHOW DATABASES commands to hang, details the troubleshooting steps taken, and presents three practical solutions to resolve the MTU‑related packet loss.
This guide explains why traditional star‑topology VPNs suffer from bandwidth bottlenecks, introduces NAT‑traversal mesh networking, and provides step‑by‑step instructions for deploying a self‑hosted Headscale control server, configuring TLS, setting up DERP relays, installing Tailscale clients on Linux, macOS and Windows, and troubleshooting connectivity.
Learn to overcome NAT limitations and create a high‑speed, peer‑to‑peer network by installing and configuring Headscale, an open‑source Tailscale controller, including server setup, certificate handling, Docker deployment, client installation across platforms, and optional DERP relay configuration for reliable connectivity.
During the COVID‑19 pandemic, reliance on traditional VPNs surged, exposing growing security risks, while Zscaler’s report highlights attackers exploiting VPN vulnerabilities and underscores that adopting a zero‑trust architecture can dramatically reduce attack surfaces and protect remote workforces.
ICBC’s Software Development Center overhauled its star‑topology network by deploying MPLS VPN, eliminating a central hub, reducing costs, establishing optimal point‑to‑point paths, and enabling seamless expansion, thereby boosting reliability, performance, and supporting future R&D growth across multiple locations.
This visual guide presents a detailed mind map of core networking concepts—including transmission media, Ethernet frames, IP addressing, routing protocols, VLANs, NAT, IPv6, DHCP, and VPN technologies—providing concise illustrations for each topic to aid learners in mastering network fundamentals.
This comprehensive guide explains what a firewall is, its origins, the hardware and software types, session management, NAT, VPN, security zones, policies, threat mitigation, DoS protection, IDS/IPS, deep inspection, and performance considerations, providing a solid foundation for anyone interested in network security.
This guide explains how Tailscale, built on WireGuard, creates a secure virtual LAN across devices, outlines its key features, installation methods on various platforms, command‑line usage, subnet routing, and advanced setups like custom relays for remote access and development.
This article introduces Tailscale, a WireGuard‑based virtual networking tool, explains its key security features, shows how to install and configure it on various platforms, and outlines practical use cases such as file transfer, remote development, and network proxying.
This article explains the limitations of traditional IPSec VPNs for growing enterprises, introduces Huawei's DSVPN dynamic VPN technology, provides detailed configuration procedures for Hub and Spoke devices—including interface, routing, firewall, and security policies—and demonstrates verification of end‑to‑end connectivity.
This article explains how traditional VPNs are being replaced by Software‑Defined Perimeter (SDP) solutions, detailing the underlying protocols, encryption methods, SOCKS5 proxy integration, custom DNS handling, IAM integration, and the ZFE gateway architecture that together enable a zero‑trust network for modern enterprises.
The article investigates recent rumors that VPN usage has been subject to large‑scale administrative penalties in China, examines official Zhejiang government records, reveals that most reported cases were either errors or retractions, and clarifies the legal restrictions on unauthorized international networking.
This guide explains WireGuard's strict kernel requirements, shows how to upgrade kernels on various Linux distributions, provides detailed commands for installing WireGuard on older kernels, and introduces a one‑click script that automates configuration, firewall adjustments, and client management.
A recent investigation uncovered a 1.2 TB leak containing personal data of up to 20 million users from seven VPN services that claim to keep no logs, revealing email addresses, passwords, IPs, device details, and connection logs, and prompting urgent security recommendations.
The article explains that using VPNs to access foreign networks in China is illegal under current regulations, recounts recent enforcement actions—including fines and administrative warnings against individuals and vendors—and warns developers and overseas students of the severe penalties that can follow illegal VPN usage.
During the COVID‑19 outbreak, the company's internal network operations team established a remote‑work guarantee task force that expanded VPN capacity, provided 24/7 desktop support, and optimized video and phone conferencing to enable over 4,300 employees to work remotely without service interruption.
ZeroTier lets you create a peer‑to‑peer virtual network that bridges devices across different physical locations without a public IP, and this guide walks you through its core concepts, registration, network creation, client installation, joining, IP assignment, connectivity testing, and optional Moon relay setup.
This guide outlines the critical considerations for VPN licensing, bandwidth, IP address capacity, troubleshooting, video‑conference licensing, backup solutions, emergency on‑call procedures, and business system accessibility to ensure smooth remote work operations.
This article details the step‑by‑step evolution of Mafengwo's Kubernetes network—from early Flannel VXLAN setups, through a VPN‑server bridge for external access, to a MAC‑VLAN CNI solution—highlighting design principles, challenges, and recent optimization plans for large‑scale Java micro‑services.
This guide explains the security risks of transparent Internet data transmission, introduces IPSec's authentication, encryption, integrity, and anti‑replay features, and provides step‑by‑step Huawei and Cisco router configurations—including interface setup, IKE proposals, IPSec profiles, and verification commands—to securely connect branch and headquarters networks via a VPN.
This guide demonstrates how to configure routers, firewalls, NAT, and IPSec policies to establish a site‑to‑site VPN between a headquarters and branch office when both use NAT devices, enabling mutual access and internet connectivity.
This article describes the motivation, requirements, solution research, and detailed design of a lightweight distributed VPN built with Go, employing KCP as the transport protocol, and includes prototype source code for both hub and peer components.
This article explains how VPC enables component layering and isolation, covering four typical scenarios—enabling internet access for subnets, separating internal and external resources, inter‑connecting multiple cloud VPCs, and linking on‑premises networks with cloud VPCs—along with step‑by‑step implementation guidance.
The article opens with Confucius' teachings on knowledge and inquiry, then presents a developer's issue where MotionPro VPN disconnects on Android, outlines two main causes—lack of app trust and background cleaning by phone managers—and provides clear steps to whitelist the app and reinstall it with trust enabled.
This article explains how to connect Azure virtual networks using VNet peering, detailing user access methods, peering benefits and limitations, and step‑by‑step configuration of three resource‑manager‑based VNets with gateways, ExpressRoute and VPN, culminating in connectivity verification via Windows Server VMs.
This guide walks you through installing StrongSwan on a CentOS client, configuring IPSec tunnels, and creating a UCloud IPSec VPN gateway to achieve secure hybrid‑cloud network connectivity using VPN.
This document outlines a comprehensive enterprise IT infrastructure plan covering network topology, hardware selection, security measures, VPN solutions, and wireless deployment to support a growing organization with minimal operational overhead and high reliability.
The article details the AR2240 L2TP VPN configuration, outlines a step‑by‑step debugging process that identified a username formatting error on Windows 8 clients, and provides the corrective action of prefixing the username with a backslash to achieve successful connection.
This tutorial walks you through installing required packages, compiling LZO and OpenVPN, configuring environment variables, generating CA, server and client certificates, packaging client files, adjusting server and client configuration files, and finally starting the OpenVPN service on a Linux host.
This guide details step‑by‑step configuration of ACL and static NAT on the web interface for same‑subnet and different‑subnet scenarios, explains a VPN routing problem on an AR2200 LAC, identifies the NAT‑related root cause, and provides the corrective actions.
This guide provides a step‑by‑step configuration for setting up an L2TP VPN on Huawei equipment, covering ACL rules, IP pools, user authentication, interface settings, virtual templates, PPP parameters, static routing, and related commands.
This tutorial walks you through installing OpenVPN on a Linux server, generating server and client certificates, configuring the OpenVPN service, enabling IP forwarding, and setting up client connections with detailed commands and screenshots.
