Series
Read in order, or jump to what hurts
Each series is a ladder. Beginner pieces assume nothing and define every acronym; advanced pieces assume the ones before them and do not re-explain fundamentals.
Beginner
Networking from First Principles
The stack explained without hand-waving. Start here if a VLAN is still an abstraction.
- 01 What Actually Happens When You Open a Web Page Beginner 6 min
- 02 IP Addresses, Subnets, and Why /24 Isn't Magic Beginner 4 min
- 03 VLANs: One Switch, Many Networks Beginner 5 min
- 04 Routing, Gateways, and the Default Route Beginner 5 min
- 05 DHCP and DNS: The Two Services Everything Assumes Beginner 6 min
Beginner to Intermediate
Switching and the Campus LAN
What a switch actually does with a frame, and why loops, uplinks, and power budgets decide whether the campus stays up.
Beginner to Advanced
Enterprise Wi-Fi
From channels and airtime to OFDMA, BSS coloring, and multi-link operation.
- 01 Wi-Fi Basics: Bands, Channels, and Widths Beginner 4 min
- 02 Why Your Wi-Fi Is Slow: Airtime, Not Bandwidth Beginner 4 min
- 03 Reading a Site Survey Intermediate 3 min
- 04 Deterministic RF Tuning for High-Density Wi-Fi 6 Advanced 6 min
- 05 Deterministic RF Tuning for High-Density Wi-Fi 7 Advanced 5 min
- 06 Roaming in Practice: 802.11k, v, and r Intermediate 4 min
Beginner to Advanced
Segmentation and Security
Trust boundaries, stateful filtering, 802.1X, and what inspection really costs.
- 01 Trust Boundaries: Why a VLAN Is Not a Security Control Beginner 4 min
- 02 From Flat to Segmented: Migrating a Live Network Intermediate 4 min
- 03 Object-Based Networking and Policy Micro-Segmentation Advanced 5 min
- 04 802.1X Dynamic VLAN Assignment and RADIUS Advanced 6 min
- 05 Cryptographic Interception and SSL/TLS Inspection Advanced 4 min
- 06 DNS as a Security Control Intermediate 4 min
Intermediate
Operations and Automation
Documentation, read-only auditing, change windows, and the multicast problem nobody warns you about.
Intermediate
Static Routing and the Multi-Site Network
From the routing table to a second campus: static routes, summarization, site links, and the failure modes that come with them.
- 01 The Routing Table, Line by Line Intermediate 4 min
- 02 Static Routes: Right Tool, Common Trap Intermediate 4 min
- 03 Designing a Second Campus Intermediate 5 min
- 04 Routing Between Sites: Fiber, VPN, and the UniFi Reality Intermediate 5 min
- 05 When Routes Break: Verification and Troubleshooting Intermediate 4 min
Intermediate
Packet Analysis
Reading a capture instead of guessing. tcpdump, Wireshark, and the five patterns that explain most tickets.
Intermediate
DNS, DHCP, and Core Services
The two services every other service assumes, at the depth a production network needs.
Intermediate to Advanced
Firewalls and Policy Engineering
Zones, state, NAT, and the discipline of a rulebase you can defend in an audit.
Intermediate
VPNs and Remote Access
IPsec, WireGuard, TLS tunnels, and where zero trust actually replaces a VPN.
- 01 What a VPN Actually Buys You Intermediate 3 min
- 02 IPsec Without the Acronym Soup Intermediate 3 min
- 03 WireGuard in Practice Intermediate 3 min
- 04 TLS VPNs and Client Access Intermediate 3 min
- 05 Split Tunneling and the Return Path Intermediate 4 min
- 06 When Zero Trust Replaces VPN Advanced 3 min
Advanced
WAN, SD-WAN, and the Internet Edge
Circuits, BGP at the edge, SD-WAN claims versus reality, and QoS where the bill is.
Intermediate
Monitoring and Observability
Everything you need to know what the network is doing, from SNMP to alert design.
Beginner
Physical Layer and Cabling
Copper, fiber, testing, and the rack standards that make everything above them maintainable.
Intermediate
QoS and Real-Time Traffic
Classification, queuing, and why voice breaks at 07:55 while everything else looks fine.
Advanced
Network Programmability
NETCONF, RESTCONF, YANG, and Python that changes a network safely.
Intermediate
UniFi Playbooks
The controller, end to end: adoption, VLANs, zones, Wi-Fi, switching, and the settings that bite.
Planned
What comes next
Written in the same shape, published only when the whole series is ready.