Categories
Networking
Give your services clean domain names, reach them safely from anywhere, block ads network-wide, and segment your network like a professional.
Software
Guides
Secure Remote Access to Your Home Server
Compare VPN, reverse proxy, and Tailscale patterns without exposing insecure ports.
Home Server Networking Guide
Reverse proxies, DNS, VLANs and secure remote access — give your services clean, reachable names the right way.
Tutorials
How to Set Up WireGuard VPN
Self-host WireGuard so you can reach your homelab securely from anywhere.
How to Install Nginx Proxy Manager
Publish internal services with free TLS certificates and a friendly UI.
How to Set Up Caddy as a Reverse Proxy
Automatic HTTPS with minimal config for homelab services.
How to Set Up Pi-hole for Network-Wide Ad Blocking
Install Pi-hole with Docker to block ads and trackers for every device on your home network.
In this category
Tailscale vs WireGuard
Managed mesh VPN vs self-hosted WireGuard — ease vs control for remote homelab access.
Comparisons
Tailscale vs WireGuard
Managed mesh VPN vs self-hosted WireGuard — ease vs control for remote homelab access.
Software
Glossary
Port Forwarding
A router rule that directs incoming internet traffic on a specific port to a device on your local network.
Reverse Proxy
A server that sits in front of your services, routing requests by domain name and handling TLS certificates.
VPN(Virtual Private Network)
An encrypted tunnel that lets you securely access your home network from anywhere as if you were local.
DNS(Domain Name System)
The system that translates human-readable names like example.com into the IP addresses computers use.
DHCP(Dynamic Host Configuration Protocol)
A service that automatically assigns IP addresses and network settings to devices as they join the network.
VLAN(Virtual LAN)
A way to split one physical network into isolated logical networks for security and organization.
Subnet
A logical subdivision of an IP network, defined by a mask that separates the network and host portions of an address.
IP Address
A numeric label that identifies a device on a network, such as 192.168.1.10 (IPv4).
Static IP
A fixed IP address that never changes, either set on the device or reserved on the router.
Dynamic DNS(DDNS)
A service that keeps a domain name pointed at your home's changing public IP address.
CGNAT(Carrier-Grade NAT)
An ISP setup where many customers share one public IP, making inbound connections impossible without workarounds.
Wake-on-LAN(WoL)
A feature that powers on a computer remotely by sending it a special network packet.
PoE(Power over Ethernet)
Delivering electrical power to devices over the same Ethernet cable that carries data.
MAC Address
A unique hardware identifier assigned to a device's network interface.
Default Gateway
The device (usually your router) that traffic is sent to when leaving the local network.
NAT(Network Address Translation)
The router technique that lets many private devices share one public IP address.
Load Balancer
A component that spreads incoming requests across multiple servers or services.
CGNAT(Carrier-Grade NAT)
When your ISP puts you behind shared public IP addresses, blocking direct inbound connections.
PoE(Power over Ethernet)
Delivering electrical power to devices like access points and cameras through Ethernet cables.
VLAN(Virtual LAN)
A logical network segment that isolates traffic on shared physical switches.