Series designed for deep, sequential learning.

Compare the most common software options and commit to a clean, repeatable stack for cybersecurity study.

Stand up a pfSense + Security Onion stack on one Proxmox node using OVS, VLANs, and port mirroring to get SIEM-grade visibility without a full cluster.

Advanced pfSense hardening and segmentation for a cybersecurity lab: policy routing, IDS/IPS, DNS controls, QoS, and SIEM logging.

Introduction to the Building a Homelab on a Budget series, with goals, scope, and a practical roadmap.

Part 2 is a storage buying guide: what SSDs and HDDs to purchase, how to choose CMR drives, when to mirror, and how to back up cheaply.

Part 3 is a network buying guide: what router, switch, and access point to buy, when to upgrade to 2.5GbE, and how to plan VLANs without overspending.

Part 1 consolidates the mc-platform architecture, v1beta1 CRDs, and the first MinecraftServer controller loop.

Part 2 explains MinecraftNetwork reconciliation, velocity.toml rendering, backend resolution, and RCON addon wiring.

Part 3 documents the proxy policy DSL, routing order, control-plane APIs, and audit architecture.

Part 1: Bootstrap a 3-master/2-worker RHEL Kubespray-based cluster and define core architecture.

Part 2: Configure Cilium L2LB, Istio ingress, and ExternalDNS for bare-metal routing.

Part 3: Implement Rook Ceph and Local Path storage with RBD/CephFS classes and tiers.

Part 4: Day-2 tooling—Velero backups, Hubble UI, Jaeger/Kiali, Tailscale, K9s, and ops.

Part 5: Deploy Elastic Stack with ECK, sizing guidance, storage class, and ILM retention.

A clear, internal-first introduction to Kubernetes: why it exists, the control plane/data plane split, and the core objects that define desired state.

A Linux-first view of how Kubernetes enforces isolation and resource limits, with concrete YAML mapping, kernel primitives, and debug steps.

A practical, internal view of a Pod: from scheduling and sandbox creation to networking, probes, and termination.

A practical guide to Kubernetes Service networking: ClusterIP routing, kube-proxy modes, and eBPF data paths.

A technical walkthrough of CNI: lifecycle, plugin chains, IPAM, and troubleshooting.

Part 1 explains how Tor circuits, relay roles, onion routing work, plus the threat model and tradeoffs. It sets up the series path toward crawling through Tor.

Part 2 compares Tor-only, Tor over VPN, and VPN over Tor, explaining what each observer sees and which setup fits which threat model.

Part 3 explains safe Tor usage, common leaks, and the tools that preserve isolation, from Tor Browser to Tails and Whonix.

Part 4 explains why Tor and BitTorrent are a risky combination: UDP discovery, metadata leaks, and high-volume flows make correlation and deanonymization far easier.

Part 5 outlines a Tor-based crawling architecture with code-level flow, proxy failover logic, and operational guidance.