TUTORIALS.

planning and building a VLAN-segmented homelab network — tiers, a build order that avoids any outage, a real VPN kill switch, and the mistakes worth skipping.

ISC dhcpd is end-of-life upstream. moving to Kea, field by field, on a flat network — no VLANs required first.

forcing specific traffic through a VPN at the router level, with a rule that fails closed instead of quietly leaking your real IP.

giving one container its own tailnet address, without a public port-forward and without exposing the whole LAN with a subnet router.