Network engineering,
taught end-to-end.
A self-paced course on Linux network administration, WireGuard, and the self-hosted infrastructure most tutorials skip. Written modules, video walkthroughs, downloadable configs. Pay once, keep it forever.
STRIPE CHECKOUT · 30-DAY REFUND · MODULE 01 FREE TO READ
Seven modules, end-to-end.
Pick the right tool, build the tunnel, harden the egress, watch for leaks, keep it alive past month three. Each module includes a written walkthrough, video demo, and downloadable configs.
Threat model and product selection
FREEEvaluating VPS providers for production
INCLUDEDWireGuard from first principles
INCLUDEDAdvanced TLS and DPI-resistant transport
INCLUDEDMulti-region egress and IP management
INCLUDEDMonitoring, kill switches, leak prevention
INCLUDEDMaintenance playbook
INCLUDEDDefense isn't one wall.
It's four, stacked.
The course is built on the assumption that any single control will fail. Each layer narrows the attacker's options and widens your detection window.
Edge firewall, DNS filtering, geo & threat-intel blocks. The first miss is on the public internet, where it's cheapest to fix.
Segmentation, ACLs, lateral-movement controls. Compromise of a printer should not give access to payroll.
Hardened router, switch, and AP configuration. Default credentials, unused services, and stale firmware removed.
Backup integrity, access reviews, awareness training. The layer that keeps the others honest.
A baseline most networks fail.
Eight controls every small network should meet, drawn from CIS Controls v8 and NIST SP 800-53. Walk through them yourself against your own router — nothing is scanned, nothing leaves your browser.
Baseline controls
Start with the foundations.
Engineering write-ups on the same surface area as the course. If they're useful, the course builds on them with video walkthroughs and downloadable configs.
The Server Is Up but Nobody Can Connect: A Layered Debugging Playbook
What Your HTTPS Connection Still Leaks: SNI, Fingerprints, and ECH
DMIT ships dual-stack: the IPv6 leak that breaks your IPv4 tunnel
Chaining DMIT Tokyo with a Webshare residential exit: the two-hop egress pattern
Provisioning a DMIT Tokyo node from zero: 45 minutes to a working CN2 GIA tunnel
AWS Lightsail Data Transfer Quotas: A Postmortem on Cross-Instance Pool Accounting
Pay once. Learn the whole stack.
Seven modules, video walkthroughs, downloadable configs, free lifetime updates. 30-day refund — if Module 01 isn't your speed, get your money back, no questions.