Posts

Enterprise Routing at Home: Harnessing iBGP and Selective CDN Steering on MikroTik RouterOS v7

-
Image
Who says Border Gateway Protocol (BGP) is reserved strictly for enterprise datacenters and Tier-1 service providers? With a MikroTik router and a lightweight Linux container running in your home lab, you can bring enterprise-grade routing capabilities right to your network. In this article, we explore how to deploy an Internal BGP (iBGP) control plane paired with selective CDN traffic steering and targeted DSCP Quality of Service (QoS) on MikroTik RouterOS v7. The result is an ultra-optimized, dynamic, and high-performance home network tailored for gaming, media streaming, and real-time traffic—all without the maintenance burden of static IP lists. Primer: Core Networking Concepts Before diving into the architecture, let’s quickly break down the fundamental technologies that make this setup possible: BGP (Border Gateway Protocol): The routing protocol of the global internet. Unlike interior routing protocols (like OSPF) designed for a single network, BGP exchanges reachability info b...
Post a Comment
Read more

Every Perspective Deserves to Be Heard: Making Research Attainable and Implementable

-
Understanding the relationship between research, innovation, time, resource constraints, and practical engineering. Introduction A good idea is a valuable starting point, but an idea alone does not guarantee a successful outcome. Whether in academic research, business strategy, or technology implementation, proposals must go beyond conceptual correctness. They must demonstrate that the proposed approach can actually be carried out within the available environment, resources, and operational constraints. Throughout my academic journey, particularly during my Systems Analysis and Design (SAD), Research Proposal Preparation (RPP), Research and Project Development (RPD), Strategic Management (STRAMA), and thesis work, one principle became increasingly important to me: Research must be attainable. It should not only explain what could be done. It should establish how, where, with what resources, and under what conditions the proposed solution can be implemented. This principle...
Post a Comment
Read more

Three People That Truly Listened: An Open Letter

-
Para kina Uncle Tutut, Tata Fando, at kay Ninang Gigi, Paano na kaya? Ngayong wala na kayo, madalas kong maitanong sa sarili ko kung sino na ang natitirang makikinig sa akin katulad ng pakikinig ninyo. Sino na ang pwede kong pagkuwentuhan ng mga bagay na naiisip ko, ng mga random na ideas ko, at kahit ng maliliit na achievements na masaya akong ibahagi? May isang quote si Maya Angelou na nagsasabing, "People will forget what you said, people will forget what you did, but people will never forget how you made them feel." At sa tuwing naiisip ko ang quote na iyon, kayong tatlo agad ang naaalala ko. Hindi ko man maalala ang lahat ng mga napag-usapan natin o ang bawat pagkakataong nagkasama tayo, hinding-hindi ko makakalimutan kung paano ninyo ako pinaramdam. You made me feel that I mattered. Na may halaga ako. Na may lugar ako sa mundong ito. Pag kasama ko kayo, naramdaman kong nag-e-exist ako nang buo. Hindi ko kailangang magpanggap, mag-adjust, o baguhin ang sarili ko para lan...
Post a Comment
Read more

Building a Zero-Recurring-Cost Enterprise SecOps & Low-Power Hardware Architecture

-
Image
In our previous article, we laid out the foundational design for a resilient, high-availability private cloud. But compute and networking are only half the equation. In a production-grade enterprise environment, observability without active threat defense is a liability , and high-availability virtualization shouldn't come at the cost of massive power bills and noisy server racks. Today, we take a deep dive into our operational Security Operations (SecOps) pipeline: integrating Wazuh SIEM , Suricata v7 IDS/IPS , a Centralized ClamAV Local Mirror UI ( 192.168.88.34 ) , an AI-Driven Incident Digest Pipeline (n8n + Local Qwen LLM) , and our Low-Power Bare-Metal Micro-Cluster Architecture to achieve complete operational autonomy with zero cloud licensing fees[cite: 16, 17]. 1. Multi-Layered Threat Defense Architecture To protect our multi-node Proxmox HA cluster and internal workloads, we enforce a defense-in-depth security approach spanning Layer 3 to Laye...
Post a Comment
Read more

Complete Bare-Metal Setup of Heimdall Dashboard on Debian 13 Using Apache

-
Image
Managing a complex home lab or production deployment network environment often involves navigating multiple distinct port parameters and host addresses. The Heimdall Application Dashboard acts as an ideal solution—providing a beautiful, unified directory layout to organize and streamline user web access. While containerized deployment variations like Docker are standard, a bare-metal LAMP stack installation (Apache, PHP, and SQLite) directly on Debian 13 maximizes host resource utilization efficiency, significantly decreases active memory footprints, and maintains native OS-level file structure access. 1. Structural Prerequisites Ensure your lab infrastructure meets the primary bare-metal baseline requirements defined below before starting the software deployment sequence: Operating System & Host Parameters Host Platform: An active deployment instance of Debian 13 (Trixie) operating natively on bare hardware, or mapped as an infrastructure Virtual Machine (VM) or Linux Containe...
Post a Comment
Read more