Networking & DNS
Search
Articles
Reverse DNS — the PTR record — is the lookup that maps an IP address back to a hostname. It's the inverse of the A/AAAA record that maps a hostname to…
Let's Encrypt is a free, automated, browser-trusted certificate authority. Three things are needed: a domain pointing at your VPS, a way to prove you…
Sending mail from a VPS in 2026 is harder than it used to be — not because the protocols changed, but because every major recipient (Gmail, Outlook,…
Three reverse proxies cover the vast majority of practical deployments in 2026. Each is best at something specific. This article picks them apart so you can…
The standard Let's Encrypt flow uses HTTP-01: certbot serves a challenge on port 80, the CA fetches it, cert issued. This fails if port 80 is blocked, busy,…
An IP that ends up on a public blocklist hurts in different ways depending on what you use the VPS for: outbound mail rejected silently, the carrier's SIP…
WireGuard is the cleanest way to connect two VPSes — or two sites — over an encrypted tunnel. Configuration is a few lines of text per side. This…
IPv4 is exhausted; IPv6 has been ready for decades. Yet the internet remains stubbornly dual-stack because some destinations still don't have IPv6. This…
UFW is great for "open SSH, open HTTPS, close everything else." When you need more control — per-source-IP rate limits, custom port ranges, blocking…
Road-warrior VPN gives your laptop and phone always-on access to services on your LYLIX VPS — internal admin interfaces, databases, monitoring dashboards…
Split-horizon DNS is the pattern where the same hostname resolves to different IPs depending on who's asking. Inside your network (or your VPN),…
Most people put their zones at Cloudflare / Route 53 / their registrar and never think about it. Running your own authoritative nameserver on a VPS is a…
You have an app listening on port 8080 (or 3000, or 5000) and you want it on https://app.example.com with a real cert. The pattern is a reverse proxy in…
Cloudflare Tunnel (formerly Argo Tunnel) is a free way to expose a service on your VPS to the public without opening any ports on the VPS itself — an…
Three competing abstractions sit on top of Linux's netfilter: ufw (Debian/Ubuntu's simple wrapper), firewalld (AlmaLinux's zone-based manager), and raw…
You'd think in 2026 that running a mail server on IPv6 alone would be reasonable. It isn't. Mail is one of the few places where IPv6-only is still a…
Powered by WHMCompleteSolution