Русский flag Русский

All Posts

084 | Keenetic: A Modern Router with Modular Architecture

2025-08-16

Keenetic: A Router Whose Main Asset Is Its Operating System

A Quick Look at Keenetic

In the world of home routers, where most devices come with proprietary, bloated firmware, Keenetic stands out with its unique approach. Instead of competing solely on hardware, the company focuses on its own operating system — KeeneticOS. This makes their devices not just routers, but flexible, stable, and expandable network platforms.

KeeneticOS: Modular and Reliable Core

Under the hood, Keenetic runs a Linux-based system topped with a unique modular operating system. This approach offers two key advantages that tech-savvy users will appreciate:

082 | Firewall Basics: UFW — Simple and Powerful Protection

2025-08-14

Introduction: The First Line of Defense for Your Server

Before thinking about complex intrusion detection systems such as Fail2ban or CrowdSec, you need to build the first and most reliable line of defense—a firewall. A firewall controls all network traffic entering and leaving your server and blocks unauthorized connection attempts.

Traditionally, Linux servers have used iptables to manage firewalls, but its syntax can be complicated and confusing. Fortunately, there is a simpler and more intuitive tool — UFW (Uncomplicated Firewall).

MTU Issue on reg.ru and Its Solution via iptables

2025-08-05


Introduction: A Hidden Network Issue

Developers and system administrators using servers on the OpenStack platform (for example, the C*-M*-D* hosting plans from reg.ru) sometimes encounter mysterious network problems. The internet seems to work, but when trying to transfer large amounts of data or establish connections to certain services, requests may hang or fail due to timeouts.

The provider explains this issue as a feature of their infrastructure:

Servers on the OpenStack platform use VxLAN technology, which reserves 50 bytes for service information. Because of this, the maximum transmission unit (MTU) on the server’s main network interface (ens3) is 1450 bytes.

067 | Redundancy of Interoffice Links (Site-to-Site VPN, MPLS, Dark Fiber)

2025-07-29

We’ve already discussed how to ensure reliable connectivity within a single building. Now let’s look at a more complex but equally critical topic: redundancy of communication links between geographically distributed offices or branches. This is crucial for companies where employees across locations need to exchange data, access shared resources (such as a central CRM, file servers, or IP telephony), and work as a unified whole.

065 | Why Network Resilience Is Not a Luxury, but a Necessity

2025-07-27

In today’s world, where every aspect of business depends on IT, and downtime is measured not only in lost revenue but also in missed opportunities and reputational damage, connection stability becomes a critically important factor. From email and internal CRMs to online sales and cloud services — all of it requires constant and reliable network access.

This is where network link redundancy comes into play. It’s not just “insurance” — it’s a fundamental part of your business continuity and high availability strategy for your IT infrastructure.

Huge thanks to Mikhail for the work — I'm very pleased with the result. Special thanks for his recommendations during setup: from my rather muddled brief (I know little about servers), Mikhail, through clarifying questions and suggestions, formed a clear understanding of what the final build would accomplish and how best to organize everything. I recommend him!

2025-07-21

Many thanks to Mikhail for the work, I am very pleased with the result. I especially thank him for the recommendations during the setup process — from my rather muddled brief (and I know little about servers) Mikhail, with clarifying questions and suggestions of his own, formulated a clear understanding of what tasks the final build will solve and how to organize everything in the best way. I recommend!


Reply: Thank you for the feedback!
Glad to help!

Configuring EoIP Tunnel Between MikroTik and Keenetic: Bridging Networks Over Private IPs

2025-07-17

In the world of networking, there’s often a need to bridge two remote LANs so they behave like a single local network—even when separated by different routers. For MikroTik users, the concept of EoIP (Ethernet over IP) is familiar: it’s a proprietary tunneling protocol that allows creation of a virtual Ethernet interface (Layer 2) over an IP network.

Good news for Keenetic users: since firmware NDMS v2.10, Keenetic routers also support EoIP! This opens up exciting possibilities for advanced network designs.

What is rp_filter and what is it used for?

2025-07-15

In the world of Linux and networking technologies, there are many subtle but critically important kernel settings. One such setting is rp_filter. This parameter, often overlooked, plays a key role in network security and correct packet routing. Let’s explore what it is, how it works, and why understanding it is essential for every system administrator.

What is rp_filter?

rp_filter stands for Reverse Path Filtering. It’s a Linux kernel mechanism that checks incoming network packets to verify whether they arrived on the interface through which a reply to the sender’s IP address would be routed.

049 | UniFi: Where Style, Simplicity, and Centralized Network Management Meet

2025-07-11

Introduction: UniFi – An Ecosystem for Modern Networks

In the world of business networking, many solutions exist—but few offer the same level of integration, management simplicity, and aesthetics as the UniFi product line from American company Ubiquiti Networks. Unlike the more “bare-bones” approach of Mikrotik, UniFi is designed for building a unified, centrally managed ecosystem. This makes it especially appealing to small and medium-sized businesses that value not just performance, but also ease of deployment, monitoring, and scalability.

048 | Mikrotik: What Is It and Why Is It Ideal for Small Business?

2025-07-10

Introduction: Mikrotik – More Than Just a Router

When it comes to networking hardware for home or small offices, most people think of consumer-grade routers like those from TP-Link, ASUS, or D-Link. However, there’s a category of devices offering far more flexibility, features, and control—while remaining affordable. We’re talking about Mikrotik, a Latvian company known for its wide range of networking gear, especially routers and switches.

What truly sets Mikrotik apart isn’t just the hardware, but its operating system — RouterOS. This powerful software transforms ordinary devices into versatile tools capable of handling tasks usually reserved for far more expensive enterprise solutions.