https://blog.landryzetam.net/tags/networking/Recent content in Networking on Landry Zetam - Tech BlogHugo -- gohugo.ioen-usTue, 02 Jun 2026 00:00:00 +0000https://blog.landryzetam.net/posts/lint-your-network-before-it-exists/Tue, 02 Jun 2026 00:00:00 +0000https://blog.landryzetam.net/posts/lint-your-network-before-it-exists/<p>Most network security failures aren&rsquo;t exotic. They&rsquo;re a security group left open to the whole internet on port 22, a subnet that auto-assigns public IPs to everything you launch into it, or a virtual network with flow logs never turned on so you have no record of what happened. The surprise isn&rsquo;t that these slip through — it&rsquo;s that you can catch every one of them <em>before a single resource exists</em>, by linting the infrastructure code the same way you lint application code.</p>https://blog.landryzetam.net/posts/unifi-vlan-home-network/Tue, 23 Dec 2025 00:00:00 +0000https://blog.landryzetam.net/posts/unifi-vlan-home-network/<p>Your home network doesn&rsquo;t have to be a flat, insecure mess where your smart toaster can talk to your NAS. With UniFi gear and some intentional design, you can build network segmentation that rivals enterprise setups—without the enterprise price tag. This is how I architected a 10-VLAN home network that isolates everything from security cameras to a 7-node Kubernetes cluster.</p> <hr> <h2 id="part-1-the-design-philosophy">Part 1: The Design Philosophy</h2> <h3 id="why-segment-at-all">Why Segment at All?</h3> <p>Most home networks run everything on a single subnet. Your laptop, your Ring cameras, your kids&rsquo; tablets, and your IoT light bulbs all share the same network space. This creates several problems:</p>