Re: Networking book recommendation
On 5/3/22 12:42, Tom Browder wrote:
I'm about to sign up for a fixed IPv4 address to my home. I know a bit
about setting up simple internal networks, but want to make sure I'm
doing it all correctly and securely. Does anyone have a good book they
recommend for such use?
On 5/3/22 13:35, Tom Browder wrote:
> On Tue, May 3, 2022 at 15:18 john doe <johndoe65534@mail.com> wrote:
>
>> On 5/3/2022 9:42 PM, Tom Browder wrote:
>>> I'm about to sign up for a fixed IPv4 address to my home. I know a bit
>>> about setting up simple internal networks, but want to make sure I'm
>>> doing it all correctly and securely. Does anyone have a good book they
>>> recommend for such use?
>>>
>>
>> What do you mean by "correctly and securly", the networking is never
>> secure.
>
>
> Thanks, I didn't know that.
>
> Depending on what you need, you might want firewall ...
>
>
> I'm considering HaProxy downsteam from the router.
>
> That also brings the question, why do you need a static IPv4 address?
>
>
> I'm moving my webservers inside.
On 5/3/22 14:14, Tom Browder wrote:
> I appreciate all the responses, and I realize, once again, that I should
> have given a little more background for the question:
>
> I have been running 10+ websites using SNI on Apache on two leased remote
> servers for many years. I am now moving the whole operation,
gradually, to
> operate out of my home on my own Debian server. During those years
I've had
> several hardware failures that were hard to deal with remotely, hence the
> decision to come home (especially since I now have a bit more space
for the
> additional equipment).
>
> I have been using a firewall and iptables to minimize inbound
traffic, but
> the details some have sent are very helpful for my current plan.
>
> In addition to the webserver being accessed externally, I will be sshing
> into my home server while traveling.
On 5/3/22 14:32, Tom Browder wrote:
> The sites are historically low traffic, but I'll watch out for problems.
> Our current ISP is AT&T and they are laying fiber quickly in my area.
I have stumbled my way through networking over the years, reading
whatever I could find. A recent book that I can recommend is
"Networking for System Administrators" by Lucas:
https://mwl.io/nonfiction/networking#n4sa
Do not conflate running public services on the Internet and remote
access to your LAN over the Internet. I strongly recommend a virtual
private server (VPS) for the former and a virtual private network (VPN)
for the latter.
For SOHO networking, I now use UniFi hardware products:
https://ui.com/
The UniFi Controller is running on a Debian VPS at Linode. Creating the
node is automated via a Linode Stack Script. In addition to the UniFi
Controller (which includes VPN capabilities), the node image includes
fail2ban, LetsEncrypt key management, and other features:
https://www.linode.com/
David
Reply to: