BreadLab reference

Docs

82 plain-language explainers of how this stuff actually works — networking, self-hosting, and local AI. Evergreen and maintained, unlike Lab Notes, which are dated writeups.

Absolute Basics

↑ top

Certs

↑ top

Cloud

↑ top

Decentralized

↑ top

Firewalls & Security

↑ top
Firewall HA pairs: active-passive failover explained Understand how active-passive failover works to ensure your firewall remains available without downtime. Firewall policies: how rule evaluation actually works Understand how firewalls evaluate rules from top to bottom, ensuring first match wins and why specific ordering is crucial. IPsec vs SSL VPNs: which VPN technology to use Compare IPsec, SSL/TLS, and WireGuard for site-to-site and remote access networking. NAT on real firewalls: SNAT, DNAT, and VIPs Understand Source Network Address Translation (SNAT), Destination Network Address Translation (DNAT), and Virtual IPs (VIPs) in enterprise firewalls. Physical security and the evil maid: the layer nobody thinks about Learn about physical security threats like the "evil maid" attack and how to protect your data at rest. Security profiles: IPS, web filtering, and antivirus at the edge Learn about security profiles like IPS, web filtering, and antivirus used in firewalls to protect your network. Site-to-site VPNs: IPsec fundamentals Understand how to create secure site-to-site connections over public internet using IPsec. Site-to-site vs remote access VPNs: choosing the right topology Learn about the two main types of VPN topologies and how to choose between them for your network needs. SSL inspection: what it is, why it breaks things, when it's worth it Understand how SSL/TLS inspection works and its implications on network security. Zero trust in plain language Understand zero trust security by breaking down its key principles into simple terms.

Hardware

↑ top

Identity & Auth

↑ top

Local AI

↑ top

Networking

↑ top
Bufferbloat: why ping spikes when someone uploads Understand and fix latency issues caused by oversized buffers in home routers during heavy uploads. Cable terminations: T568A vs B, punchdowns, and keystones Learn about the differences between T568A and T568B wiring standards, how to properly terminate cables using keystone jacks and patch panels. Cable testing: wiremap, TDR, and reading what the tester says Learn how to test cables for continuity, signal quality, and compliance with standards using different types of testers. CGNAT: why you can't port forward and what to do about it Learn about Carrier-Grade NAT (CGNAT) and how it affects your ability to set up port forwarding, along with practical solutions. Common ports and protocols: the cheat sheet that actually comes up A quick reference guide to essential networking ports and protocols for real-world use. DHCP: how devices get addresses, and why servers get static IPs Learn about Dynamic Host Configuration Protocol (DHCP) and its role in automatically assigning IP addresses to devices. Understand why servers often require static IPs. Dynamic DNS: a stable name for a changing home IP Learn how dynamic DNS keeps your home's ever-changing public IP address consistent and accessible. Ethernet cable categories: Cat5e, Cat6, Cat6a, Cat8 — what speeds really need Learn about different ethernet cable categories and their actual speed capabilities for home networking. Fiber optics: single mode vs multimode, wavelengths, and when copper loses Learn about fiber optic cables, their types (single mode and multimode), light wavelengths, and why they are preferred over copper in long-distance networking. It's always DNS: diagnosing name resolution failures Learn how to diagnose and resolve issues with domain name system (DNS) lookups. LAN, WAN, DMZ & NAT in depth: network zones, their ports, and how NAT really works Understand the trust boundaries of your network (LAN, WAN, DMZ) and learn about different types of ports and how NAT functions at a deep level. NTP and time sync: why wrong clocks break TLS, logins, and logs Learn about Network Time Protocol (NTP) and how incorrect clock synchronization can affect security, authentication, and logging. Power over Ethernet: cameras and APs without wall warts Learn how PoE works to power devices like cameras and access points using standard ethernet cables. Reading traceroute and mtr like a pro Learn to interpret traceroute and mtr outputs effectively for diagnosing network issues. Reverse Path Forwarding (uRPF): the router's anti-spoofing check Understand how reverse path forwarding works to protect against IP spoofing and DDoS attacks. Router vs switch vs firewall vs access point: what each box does Learn the roles of routers, switches, firewalls, and access points in a network. Routing basics: default gateways, static routes, and one-way traffic Understand how routing works in a homelab setting, including default gateways and when to use static routes. Split-horizon DNS: one name, different answers inside and outside Learn how to configure split-horizon DNS so that a single domain name resolves differently depending on whether it's queried from within your local network or from the internet. TCP vs UDP: why game traffic is UDP and downloads are TCP Understand the differences between TCP and UDP, and why they are used for different types of network traffic. The OSI model, explained by following one real web request Understand how network communication works through a step-by-step breakdown of a web request. Unmanaged vs managed switches: what a smart switch actually buys you Learn the differences between unmanaged and managed switches, focusing on the benefits of managed switches for home labs. Wake-on-LAN: turning machines on remotely Learn how to wake up a powered-off computer using a magic packet sent over the network. WiFi 5 vs 6 vs 6E vs 7: what actually changed Understand the differences between WiFi generations and their practical implications for your home network.

Operating Systems

↑ top

Retro Gaming

↑ top

Self-Hosting

↑ top

Virtualization

↑ top

Web Hosting

↑ top
Email for your domain: why it's the hard part Learn why hosting email yourself is risky and explore reliable third-party options. How web hosting actually works: shared vs VPS vs dedicated vs static Learn about different types of web hosting and which one is best for your needs. Multi-tenancy: how one server hosts many customers safely Understand the isolation boundaries and security measures used in hosting multiple customers on a single server. SaaS vs self-hosted: the real cost math over 5 years Explore the true costs of hosting services versus self-hosting, including financial and time considerations over a five-year period. SEO fundamentals without the snake oil Learn the essential, free practices that actually improve your website's visibility and ranking. SSL certificates for site owners: what you're actually buying Understand the different types of SSL certificates and what they really provide for your website. Static sites vs WordPress vs site builders: choosing honestly Learn about the tradeoffs of static sites, WordPress, and site builders for building a website. Website performance: why sites feel slow and the fixes that matter Learn how to optimize your website's speed by focusing on images, JavaScript weight, caching, and hosting quality. What happens when you buy a domain (and the scams that follow) Learn about buying and managing domains, including registrars, DNS, renewals, and common scams. What is SaaS? Software you rent, explained honestly Understand what SaaS means and why it's a trade-off between convenience and control.