Securing MikroTik Management with Cloudflare Zero Trust (Part 1)

Architecture diagram for managing a MikroTik router through Cloudflare Zero Trust, Cloudflare Access, Cloudflare Tunnel, cloudflared, and a management VLAN.

I, due to recent SSH vulnerabilities in MikroTik, figured this series of articles would be relevant. The router may have strong passwords and firewall filters, but those services still receive constant login attempts from automated scanners. For years, the normal answer was a VPN with a management network. VPNs work well, but they require another … Read more

BGP MED: Controlling Which Entry Point Another Network Uses

Let’s look at another BGP attribute, the Multi-Exit Discriminator, or MED. Two networks may interconnect in more than one location, and MED lets you attach a preference to the routes you advertise. An ISP might connect to the same upstream in Indianapolis and Chicago while advertising the same prefixes at both locations. The upstream now … Read more

LibreQoS 2.2 is out

LibreQoS 2.2 ChangeLog LibreQoS 2.2: What Changed Since 2.1 LibreQoS 2.2 guides operators from a fresh install through admin creation, interface selection, network preview, and service startup in the browser. Operators can build topology visually, shape subscribers created from RADIUS sessions, and compare queued demand with traffic that actually crossed the wire. This changelog covers … Read more

Multi-Core Fiber and How It Is Used in Data Centers

If you work around data centers and high-density builds, you have probably heard the term “Multi-Core Fiber” thrown around. People use it in a few different ways. Sometimes, it means a new fiber trunk that comes into a cabinet as a single cable and breaks out into dozens or even hundreds of fibers. That setup … Read more

The Third App from J2sw: Prefix Advertisement Checker

prefix

A prefix can appear in the global BGP table and still have a routing problem. The route may originate from the wrong ASN. Its ROA may also authorize a shorter prefix but reject the advertised prefix length. Checking each part normally means pulling data from several routing tools. The J2SW Prefix Advertisement Checker, my 3rd … Read more

My Plan for an All-Alta Labs Home Network

Being in the ISP world I see the home router and network cause a majority of the problems blamed on the ISP. Most home networks put the router, switch, firewall, and Wi-Fi radios into one do-it-all box. This can be underpowered in terms of both processing power and Wi-Fi signal strength.  In this post, I … Read more