2024

2024-06-27 - wireguard mtu calculation

when the wireguard protocol is used the mtu size is reduced inside the tunnel. this can be a problem when your isp cut off your mtu size and you use large packets like the ssh handshake inside a wireguard connection. this results in a connection that sometimes work and sometimes not. to enable a stable connection within wireguard and to avoid isp-related problems, the mtu should be set to 1380 bytes.

2024-05-31 - nftables router

this post deals with some advanced rules and configurations to build router based on the previous post about nftables - basics. the focus is in general on nftables but the whole thing is build on a nixos system.

2024-04-15 - nftables basics

update: 2024-04-20

nftables is the modern linux kernel (>= 3.13 nft support) packet classification framework to replace iptables.