Connecting, Securing and Optimising Enterprise Networks with Free Software
summary
Builds enterprise gateways on OpenWrt and liberated off‑the‑shelf hardware and deploys concrete solutions: mwan3 with dual watermark packet‑loss/latency failover to ignore flaky radio links, OpenVPN across 400+ sites, OSPF+BFD (bird) for sub‑second tunnel failover, and udp‑speeder FEC that drops 10% packet loss to ~0.18%. Adds DNS and IP blacklists, adblock/pi‑hole style filtering, Squid+ICAP+ClamAV for malware scanning, moves IDS to Suricata, central policy server for tiny edge boxes, ELK and Prometheus/Grafana for visibility, VRRP via keepalived and conntrackd for HA, abandons layer‑2 wireless mesh due to broadcast storms.
AI-written summary · about
chapters (4)
related talks
57mOur path to open-source routers
45mBuilding my own border router + a wireguard love story
48mWireGuard: Next Generation Abuse-Resistant Kernel Network Tunnel- 45mBuilding my own border router + a wireguard love story
29mLiving on the Edge with DCN Networking
41mModding Security & Privacy
26mNetwork monitoring with FOSS
25mOver view of linux tunnels