#NAT traversal
141 related articles
·3 min
Security Analysis of Authentik with Port Forwarding: A Self-Hosted Service Protection Guide
In-depth analysis of Authentik security with port forwarding for self-hosted services, covering NPM reverse proxy architecture, risks, and hardening with CrowdSec, MFA, VPN, and defense in depth.
Read more →
·2 min
Compass: A Local-First Code Graph Tool Built with Rust
Deep dive into Compass, an open-source local-first code graph tool built in Rust, providing structured code understanding for human developers and AI agents.
Read more →
·4 min
Self-Play AI Tackles Dominoes: The Abstraction Dilemma of MCTS and CFR
Deep dive into building a self-play AI for dominoes using MCTS and CFR, analyzing the core bottleneck of search space abstraction in imperfect information games.
Read more →
·3 min
LiveKit Agents: A Comprehensive Guide to the Open-Source Framework for Building Real-Time Voice AI Agents
Deep dive into the LiveKit Agents open-source framework for building real-time voice AI agents using STT, LLM, and TTS modules with production-ready deployment capabilities.
Read more →
·2 min
mpai: An Open-Source Tool Bringing Multiplayer Collaboration to Codex and Claude Code
mpai is an open-source terminal collaboration tool that lets team members join Codex and Claude Code sessions with full context, using Tailscale for private connections and attributed prompts.
Read more →
·4 min
4-5 Month ML Job Prep Sprint: A Career Pivot Guide for Senior CS Students
How can a senior CS student pivot to ML in 4-5 months? A practical sprint guide covering learning priorities, high-quality projects, Kaggle strategy, and interview prep for fresh graduates.
Read more →
·2 min
Building Custom C/C++ Inference Engines: A Deep Dive into the Tradeoffs Between Performance, Control, and Engineering Cost
Deep analysis of why teams build custom C/C++ inference engines instead of using PyTorch or TensorRT, exploring performance, minimal dependencies, and long-term maintenance tradeoffs.
Read more →
·3 min
Practical Guide to Self-Hosted Security Architecture with Tailscale + Caddy + Authelia
Deep dive into the Tailscale + Caddy + Authelia self-hosted security architecture: traffic flow analysis, design strengths, and common pitfalls for building secure multi-server setups.
Read more →
·5 min
Servey: The Ultimate iPhone-to-Mac Remote Control Tool with a Built-in Terminal in Your Pocket
Servey is a remote desktop tool built for Apple's ecosystem, letting iPhone/iPad control Mac with LAN hardware acceleration, P2P private connections, and a built-in terminal for developers.
Read more →
·3 min
OpenAI's Git Optimization: Tackling Performance Bottlenecks in Massive Repositories
Analysis of how OpenAI optimizes Git for massive repositories, covering monorepo bottlenecks, partial clone, sparse checkout, fsmonitor, and practical tips for engineering teams.
Read more →
·6 min
Separate Domains vs. Subdomains for Self-Hosted Services? A Deep Dive into Security Isolation Strategies
Deep dive into domain security architecture for self-hosted services: Should services with different exposure levels use separate domains or subdomains? Analysis of subdomain enumeration risks, defense in depth, and practical isolation strategies.
Read more →
·3 min
You Don't Always Need a Vector Database for Vector Search — Brute Force Might Be All You Need
In-depth analysis of when brute force vector search beats vector databases. For RAG apps with under a few hundred thousand vectors, brute force offers exact recall, simpler architecture, and easier debugging.
Read more →
·3 min
Go Team Proposes Generic Collection Library 'container': A Deep Dive into the Standard Library Completion Plan
The Go team proposes new generic collection types under container/, including Set, ordered Map, queues, and more. A deep dive into the proposal and its design trade-offs.
Read more →
·3 min
JEP 401 and JEP 539 Merged into JDK: A Deep Dive into Value Objects and Strict Field Initialization
JEP 401 (Value Objects) and JEP 539 (Strict Field Initialization) merged into JDK mainline. A deep dive into value objects' performance potential, strict initialization, and their impact on Java.
Read more →
·4 min
Strange URL Requests in Your NGINX Logs? Demystifying Automated Scanning Attacks and Defense Methods
Seeing unfamiliar 404 requests and strange URLs in your NGINX logs? This article explains automated scanning attacks—their origins, intent—and provides practical defenses using Fail2ban, CrowdSec, and more.
Read more →
·4 min
Mysterious URL Requests in NGINX Logs? Unmasking Automated Scanning Attacks and How to Defend Against Them
Seeing strange 404 requests and bizarre URLs in your NGINX access logs? Learn what automated scanning attacks are, where they come from, and how to defend with Fail2ban, CrowdSec, and other practical solutions.
Read more →
·6 min
Securely Exposing Self-Hosted Services via VPS: Architecture & Practical Guide
Learn how to securely expose self-hosted services via VPS using WireGuard tunnels, Pangolin, and reverse proxies — enabling client-free access to Plex, Immich, and more while hiding your home IP.
Read more →
·3 min
OneDrive Stuck at 400K Files? A Guide to Self-Hosted Sync Alternatives
OneDrive stalls as file counts approach 400K, causing sync failures and high CPU usage. This guide analyzes the technical causes and compares self-hosted alternatives like Syncthing, Nextcloud, and rsync/rclone.
Read more →
·3 min
OneDrive Stuck at 400K Files? A Guide to Self-Hosted Sync Solutions
OneDrive stalls when file count approaches 400K, causing sync failures and high CPU usage. This guide analyzes the bottleneck and compares Syncthing, Nextcloud, rsync/rclone for self-hosted sync.
Read more →
·6 min
qsa.sh: Complete an External Server Security Scan with a Single curl Command
qsa.sh is a minimalist external server security scanning tool. Just run curl qsa.sh to get a port exposure and vulnerability report for your public IP in 30 seconds. Learn its technical architecture and pricing.
Read more →