This article details how to set up Pi-hole on a Raspberry Pi to block ads network-wide, improving browsing and streaming experiences on all devices.
A Raspberry Pi 5 can transform a home network into a faster, safer, and easier-to-manage system by consolidating DNS, VPN, and monitoring tools into a single, low-power machine.The author implemented Pi-hole (ad blocking & DNS), Unbound (recursive DNS resolver for privacy & speed), and WireGuard (secure VPN for remote access). For monitoring, tools Uptime Kuma, Netdata, or Prometheus with Grafana provide real-time insights into network performance and security.
A detailed exploration of how clients and servers negotiate and bootstrap connections using HTTP/1.1, HTTP/2, and HTTP/3, covering redirects, TLS, ALPN, Alt-Svc, HSTS, and DNS records. It also discusses the complexities of upgrading to HTTP/3 and the behavior of different browsers.
IPShield is a DNS server that checks IP addresses against a blocklist and datacenter ranges. It provides a DNS query service to determine if an IP address is safe, flagged, or belongs to a datacenter.
"network manager can be configured using nmtui in cli."
GUI doesn't have the "ignore automatically obtained DNS parameters", only 'Ignore automatically obtained routes", so you have to use nmtui
GUI doesn't have the "ignore automatically obtained DNS parameters", only 'Ignore automatically obtained routes", so you have to use nmtui
The SVCB and HTTPS resource records allow you to speed up your time-to-first-packet (by basically stuffing the Alt-Svc HTTP header / ALPN TLS extension into the DNS); let you do redirection on the zone apex without using CNAMEs; allow for simple DNS load distribution and failover; obviate HSTS and the cumbersome preloading process; and enable stronger privacy protections via Encrypted Client Hello aka ECH
