# Networking **URL:** https://forum.hhf.technology/c/networking/51.md [Latest](https://forum.hhf.technology/latest.md) · [Categories](https://forum.hhf.technology/categories.md) · [Tags](https://forum.hhf.technology/tags.md) --- ## [About the Networking category](https://forum.hhf.technology/t/about-the-networking-category/108)
**Author:** [@amkindly](https://forum.hhf.technology/u/amkindly)\ **Replies:** 0\ **Last updated:** [October 9, 2024, 5:56pm UTC](https://forum.hhf.technology/t/about-the-networking-category/108 "2024-10-09T17:56:07Z")
Tunnels, reverse proxies, VPNs and DNS: Pangolin, Newt, Traefik, Middleware Manager, NetBird, Tailscale and WireGuard. Getting traffic in safely. What belongs here: Exposing services (Pangolin + Newt, Cloudflare Tunnels… --- ## [Unifi USW-24 Switch - Review](https://forum.hhf.technology/t/unifi-usw-24-switch-review/71)
**Author:** [@amkindly](https://forum.hhf.technology/u/amkindly)\ **Replies:** 0\ **Last updated:** [October 9, 2024, 8:05am UTC](https://forum.hhf.technology/t/unifi-usw-24-switch-review/71 "2024-10-09T08:05:56Z")
The Unifi USW-24 (Unifi Switch 24) is a great mid-range option for those looking to expand their network with plenty of wired connections, but without diving into high-end enterprise gear. It’s part of the UniFi lineu… --- ## [Deploying Pangolin on AlmaLinux in AWS/Or any General Cloud](https://forum.hhf.technology/t/deploying-pangolin-on-almalinux-in-aws-or-any-general-cloud/552)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [February 26, 2025, 4:54am UTC](https://forum.hhf.technology/t/deploying-pangolin-on-almalinux-in-aws-or-any-general-cloud/552 "2025-02-26T04:54:36Z")
Comprehensive Guide: Deploying Pangolin on AlmaLinux in AWS https://asciinema.org/a/EXTNqMyTMpxMJRyPxQcvwTv78 This guide will walk you through deploying Pangolin, a self-hosted tunneled reverse proxy management ser… --- ## [Running Newt as a Systemd Service](https://forum.hhf.technology/t/running-newt-as-a-systemd-service/437)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [January 21, 2025, 8:59am UTC](https://forum.hhf.technology/t/running-newt-as-a-systemd-service/437 "2025-01-21T08:59:00Z")
Running as a Systemd Service This guide explains how to run Newt as a systemd service on Linux systems, allowing it to start automatically on boot and be managed through the systemd service manager. Prerequisites A … --- ## [Securing Your Cloudpanel Server UI and SSH/SFTP with ZeroTier: A Complete Guide 2024](https://forum.hhf.technology/t/securing-your-cloudpanel-server-ui-and-ssh-sftp-with-zerotier-a-complete-guide-2024/430)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [December 2, 2024, 12:23pm UTC](https://forum.hhf.technology/t/securing-your-cloudpanel-server-ui-and-ssh-sftp-with-zerotier-a-complete-guide-2024/430 "2024-12-02T12:23:18Z")
Introduction This guide will show you how to secure your CloudPanel server’s administrative interfaces using ZeroTier. By following this guide, you’ll restrict CloudPanel UI (port 8443) and SSH/SFTP access (port 22) to o… --- ## [Working DNS Masq conf for local domain names UDM, Unraid, Synology, proxmox](https://forum.hhf.technology/t/working-dns-masq-conf-for-local-domain-names-udm-unraid-synology-proxmox/295)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [October 24, 2024, 7:09am UTC](https://forum.hhf.technology/t/working-dns-masq-conf-for-local-domain-names-udm-unraid-synology-proxmox/295 "2024-10-24T07:09:37Z")
\[dnsmasq.conf\] # Configuration file for dnsmasq. # # Format is one option per line, legal options are the same # as the long options legal on the command line. See # "/usr/sbin/dnsmasq --help" or "man 8 dnsmasq" for det… --- ## [Solution for Private HTTP Proxy Redirect Issues with iDRAC in Pangolin (Newt)](https://forum.hhf.technology/t/solution-for-private-http-proxy-redirect-issues-with-idrac-in-pangolin-newt/4417)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [May 4, 2026, 3:47pm UTC](https://forum.hhf.technology/t/solution-for-private-http-proxy-redirect-issues-with-idrac-in-pangolin-newt/4417 "2026-05-04T15:47:09Z")
Solution for Private HTTP Proxy Redirect Issues with iDRAC in Pangolin (Newt) This is a known behavior. iDRAC’s web interface does aggressive redirects (HTTP → HTTPS, / → /start.html → /login.html) and is picky about Ho… --- ## [CrowdSec Removal Script: Technical Overview (Cloudpanel, Ubuntu)](https://forum.hhf.technology/t/crowdsec-removal-script-technical-overview-cloudpanel-ubuntu/408)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [November 19, 2024, 4:26am UTC](https://forum.hhf.technology/t/crowdsec-removal-script-technical-overview-cloudpanel-ubuntu/408 "2024-11-19T04:26:19Z")
Script Purpose A comprehensive Bash script designed to completely remove CrowdSec components from a Linux system, providing flexible uninstallation options. Key Functionalities Prerequisite Checks Root privilege valida… --- ## [Build a Remote Exit Node with Tailscale and Fly.io: Setup Instructions](https://forum.hhf.technology/t/build-a-remote-exit-node-with-tailscale-and-fly-io-setup-instructions/381)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [November 9, 2024, 7:50am UTC](https://forum.hhf.technology/t/build-a-remote-exit-node-with-tailscale-and-fly-io-setup-instructions/381 "2024-11-09T07:50:24Z")
How to setup Tailscale exit note on fly.io \[fly.toml\] app = "fly-scale" \[env\] PATH="/usr/local/bin" TS\_EXTRA\_ARGS="--hostname=fly --advertise-exit-node" \[build\] image = "tailscale/tailscale:stable" \[deploy\] s… --- ## [Securing Your Cloudpanel Server UI and SSH/SFTP with Tailscale: A Complete Guide 2024](https://forum.hhf.technology/t/securing-your-cloudpanel-server-ui-and-ssh-sftp-with-tailscale-a-complete-guide-2024/429)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [December 1, 2024, 2:05pm UTC](https://forum.hhf.technology/t/securing-your-cloudpanel-server-ui-and-ssh-sftp-with-tailscale-a-complete-guide-2024/429 "2024-12-01T14:05:54Z")
Securing Your Server with Tailscale: A Complete Guide Want to secure your CloudPanel server and restrict access to only authorized users? We’ll walk you through using our automated script that sets up Tailscale and confi… --- ## [Deploying OpenConnect SSL VPN Server (ocserv) in Docker for Internal Projects](https://forum.hhf.technology/t/deploying-openconnect-ssl-vpn-server-ocserv-in-docker-for-internal-projects/3576)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [August 15, 2025, 6:12pm UTC](https://forum.hhf.technology/t/deploying-openconnect-ssl-vpn-server-ocserv-in-docker-for-internal-projects/3576 "2025-08-15T18:12:44Z")
Welcome! This guide details the deployment of a VPN server based on OpenConnect (ocserv), which operates over HTTPS and is compatible with Cisco AnyConnect clients. We will encapsulate the server in a Docker container fo… --- ## [You Need to Read This If You Are Proxmox User, and Why You Shouldn't Rely Solely on Proxmox](https://forum.hhf.technology/t/you-need-to-read-this-if-you-are-proxmox-user-and-why-you-shouldnt-rely-solely-on-proxmox/339)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [November 2, 2024, 1:42pm UTC](https://forum.hhf.technology/t/you-need-to-read-this-if-you-are-proxmox-user-and-why-you-shouldnt-rely-solely-on-proxmox/339 "2024-11-02T13:42:23Z")
Proxmox Virtual Environment (PVE) is a powerful platform widely used for managing virtual machines and containers. One of its useful features is the built-in firewall, which allows users to configure rules for both the h… --- ## [Tailscale hack on Home Assistant official addon for creating and updating SSL certificates](https://forum.hhf.technology/t/tailscale-hack-on-home-assistant-official-addon-for-creating-and-updating-ssl-certificates/269)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [October 20, 2024, 9:02am UTC](https://forum.hhf.technology/t/tailscale-hack-on-home-assistant-official-addon-for-creating-and-updating-ssl-certificates/269 "2024-10-20T09:02:50Z")
\[fixtailscale.sh\] #!/bin/bash # disclaimer: I did it for personal use, no guarantees # this version doesn't check if the script was already runner. Nothing bad happens anyway. # first you need to have the "reconfig.sh… --- ## [Open-Source VPN options](https://forum.hhf.technology/t/open-source-vpn-options/230)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [October 17, 2024, 6:33am UTC](https://forum.hhf.technology/t/open-source-vpn-options/230 "2024-10-17T06:33:21Z")
Open Source VPN options Amnezia VPN (OpenVPN & WireGuard protocols) - Windows, MacOS, iOS, Android, Linux (no ARM support) boringproxy (in-house developed “NameDrop” protocol) - Windows, MacOS, Linux, FreeBSD, OpenBSD b… --- ## [Pangolin 1.24: Exit Nodes, Linux Subnet Routing, and Trust Boundaries](https://forum.hhf.technology/t/pangolin-1-24-exit-nodes-linux-subnet-routing-and-trust-boundaries/4504)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [October 12, 2026, 4:42pm UTC](https://forum.hhf.technology/t/pangolin-1-24-exit-nodes-linux-subnet-routing-and-trust-boundaries/4504 "2026-10-12T16:42:06Z")
Pangolin 1.24 adds two distinct routing capabilities: Exit Nodes send a Pangolin client’s internet traffic out through a selected site, while Linux subnet-router mode lets devices without Pangolin clients reach private P… --- ## [Implementing External Authentication in Pangolin Using Tinyauth and the Middleware Manager](https://forum.hhf.technology/t/implementing-external-authentication-in-pangolin-using-tinyauth-and-the-middleware-manager/1417)
**Author:** [@Mattercoder](https://forum.hhf.technology/u/Mattercoder)\ **Replies:** 4\ **Last updated:** [June 22, 2026, 10:35pm UTC](https://forum.hhf.technology/t/implementing-external-authentication-in-pangolin-using-tinyauth-and-the-middleware-manager/1417 "2026-06-22T22:35:54Z")
Implementing External Authentication in Pangolin Using Tinyauth and the Middleware Manager Pangolin now supports flexible authentication options through the Middleware-manager. While Authentik and Authelia are popular… --- ## [Guide to deploy Pangolin on Flatcar OS 2025](https://forum.hhf.technology/t/guide-to-deploy-pangolin-on-flatcar-os-2025/468)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 2\ **Last updated:** [June 16, 2026, 6:49am UTC](https://forum.hhf.technology/t/guide-to-deploy-pangolin-on-flatcar-os-2025/468 "2026-06-16T06:49:46Z")
Guide to Deploy Pangolin on Flatcar OS As a prerequisite to deployment, confirm the following: (1) all required network ports are open and accessible (TCP 80, TCP 443, UDP 51820); an… --- ## [CrowdSec Manager for Pangolin: User Guide](https://forum.hhf.technology/t/crowdsec-manager-for-pangolin-user-guide/579)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 53\ **Last updated:** [May 24, 2026, 6:14pm UTC](https://forum.hhf.technology/t/crowdsec-manager-for-pangolin-user-guide/579 "2026-05-24T18:14:43Z")
From Bash Script to Web Application: The CrowdSec Manager Evolution Migration CrowdSec Manager has evolved from a command-line bash script into a full-featured web application. This migration represents a significant lea… --- ## [Solution to if you are hitting a DNS resolution problem that is very common on Linux (especially Linux Mint, Ubuntu derivatives, or any distro using systemd-resolved + dhcpcd / NetworkManager)](https://forum.hhf.technology/t/solution-to-if-you-are-hitting-a-dns-resolution-problem-that-is-very-common-on-linux-especially-linux-mint-ubuntu-derivatives-or-any-distro-using-systemd-resolved-dhcpcd-networkmanager/4396)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 0\ **Last updated:** [April 20, 2026, 7:51am UTC](https://forum.hhf.technology/t/solution-to-if-you-are-hitting-a-dns-resolution-problem-that-is-very-common-on-linux-especially-linux-mint-ubuntu-derivatives-or-any-distro-using-systemd-resolved-dhcpcd-networkmanager/4396 "2026-04-20T07:51:34Z")
You’re hitting a DNS resolution problem that is very common on Linux (especially Linux Mint, Ubuntu derivatives, or any distro using systemd-resolved + dhcpcd / NetworkManager). The Pangolin CLI (which uses the olm SDK … --- ## [Secure Your VM/VPS/ Pangolin Server with GeoShield: A Country-Based IP Blocking Solution](https://forum.hhf.technology/t/secure-your-vm-vps-pangolin-server-with-geoshield-a-country-based-ip-blocking-solution/994)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 17\ **Last updated:** [April 14, 2026, 9:26am UTC](https://forum.hhf.technology/t/secure-your-vm-vps-pangolin-server-with-geoshield-a-country-based-ip-blocking-solution/994 "2026-04-14T09:26:17Z")
Introduction GeoShield is a powerful, fully automated bash script that simplifies the process of implementing country-based IP blocking at the firewall level. Whether you’re running a personal VPS, a company server, or a… --- ## [Pangolin Stack Backup & Update Management Script-December-2025-Version](https://forum.hhf.technology/t/pangolin-stack-backup-update-management-script-december-2025-version/591)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 28\ **Last updated:** [April 4, 2026, 7:11pm UTC](https://forum.hhf.technology/t/pangolin-stack-backup-update-management-script-december-2025-version/591 "2026-04-04T19:11:02Z")
Pangolin Stack Backup & Update Management Script Tested on Debian, Alma, and Ubuntu 24.04(Prefered) Introduction This guide explains how to use the Pangolin Stack Backup & Management Script, a utility for managing Doc… --- ## [Solving the Real IP Problem: A Unified ipAllowList Strategy for Traefik, Cloudflare, and Tailscale](https://forum.hhf.technology/t/solving-the-real-ip-problem-a-unified-ipallowlist-strategy-for-traefik-cloudflare-and-tailscale/3376)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 3\ **Last updated:** [April 2, 2026, 1:47am UTC](https://forum.hhf.technology/t/solving-the-real-ip-problem-a-unified-ipallowlist-strategy-for-traefik-cloudflare-and-tailscale/3376 "2026-04-02T01:47:03Z")
A detailed user guide based on a regular question for correctly configuring Traefik’s ipAllowList with Cloudflare and Tailscale. The best solution is to use the traefik-get-real-ip plugin to standardize the client IP in… --- ## [Securing Pangolin + Newt with Multi-Network Docker Stacks](https://forum.hhf.technology/t/securing-pangolin-newt-with-multi-network-docker-stacks/3833)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 19\ **Last updated:** [March 24, 2026, 6:25pm UTC](https://forum.hhf.technology/t/securing-pangolin-newt-with-multi-network-docker-stacks/3833 "2026-03-24T18:25:50Z")
Securing Pangolin + Newt with Multi-Network Docker Stacks When running Pangolin with Newt, it’s tempting to throw all your containers onto the same pangolin network for convenience. But that creates a flat trust model: a… --- ## [Enhancing Your Pangolin Deployment with Middleware Manager](https://forum.hhf.technology/t/enhancing-your-pangolin-deployment-with-middleware-manager/1324)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 93\ **Last updated:** [March 22, 2026, 4:37pm UTC](https://forum.hhf.technology/t/enhancing-your-pangolin-deployment-with-middleware-manager/1324 "2026-03-22T16:37:05Z")
Enhancing Your Pangolin Deployment with Middleware Manager: A Complete Guide Use Github Repo to open Issues Please note that this was created for my personal use. I cannot accept responsibility if it affects … --- ## [Unlocking Your Home Lab's Full Potential with Pangolin-Deep Dive- Part 1](https://forum.hhf.technology/t/unlocking-your-home-labs-full-potential-with-pangolin-deep-dive-part-1/453)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 1\ **Last updated:** [March 9, 2026, 6:20pm UTC](https://forum.hhf.technology/t/unlocking-your-home-labs-full-potential-with-pangolin-deep-dive-part-1/453 "2026-03-09T18:20:50Z")
graph TB subgraph Internet VPS\[VPS with Pangolin\] CF\[DNS Provider\] end subgraph "Home Network" Router subgraph "Home Server" NEWT\[Newt Client\] subg… --- ## [What is the correct way reach home resources via the same URL, whether local or remote, and without internet?](https://forum.hhf.technology/t/what-is-the-correct-way-reach-home-resources-via-the-same-url-whether-local-or-remote-and-without-internet/4149)
**Author:** [@partytimeexcellent](https://forum.hhf.technology/u/partytimeexcellent)\ **Replies:** 9\ **Last updated:** [March 2, 2026, 11:44pm UTC](https://forum.hhf.technology/t/what-is-the-correct-way-reach-home-resources-via-the-same-url-whether-local-or-remote-and-without-internet/4149 "2026-03-02T23:44:09Z")
I currently have Pangolin setup normally on a VPS, with Cloudflare A and wildcard records for my domain name pointing to it. External access works perfectly, as does internal LAN access when internet is active. If the in… --- ## [Integrating Fail2Ban with Pangolin: Guide 2025](https://forum.hhf.technology/t/integrating-fail2ban-with-pangolin-guide-2025/485)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 8\ **Last updated:** [February 16, 2026, 8:58pm UTC](https://forum.hhf.technology/t/integrating-fail2ban-with-pangolin-guide-2025/485 "2026-02-16T20:58:56Z")
Integrating Fail2Ban with Pangolin USE ONLY AS LAST RESORT AND IF YOU KNOW WHAT YOU ARE DOING. ITS A PAIN TO MANAGE IT USE GEO-BLOCK and CROWDSEC MORE THAN ENOUGH Fail2Ban is a powerful security tool that helps protect y… --- ## [Pangolin Monitor and Notification Discord - User Guide](https://forum.hhf.technology/t/pangolin-monitor-and-notification-discord-user-guide/703)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 10\ **Last updated:** [February 8, 2026, 7:04pm UTC](https://forum.hhf.technology/t/pangolin-monitor-and-notification-discord-user-guide/703 "2026-02-08T19:04:44Z")
Introduction Pangolin Monitor is a monitoring solution for your Pangolin stack, providing real-time monitoring of containers, system resources, and security metrics with Discord notifications. This menu-based utility … --- ## [Traefik + Fail2Ban: The "Black Hole" Integration](https://forum.hhf.technology/t/traefik-fail2ban-the-black-hole-integration/4227)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 7\ **Last updated:** [February 5, 2026, 4:32am UTC](https://forum.hhf.technology/t/traefik-fail2ban-the-black-hole-integration/4227 "2026-02-05T04:32:45Z")
Traefik + Fail2Ban: The “Black Hole” Integration This setup monitors Traefik container logs and injects DROP rules into the DOCKER-USER iptables chain. By using a “Black Hole” approach, we discard malicious packets at th… --- ## [Security and Performance Enhancements in Traefik Configuration in pangolin](https://forum.hhf.technology/t/security-and-performance-enhancements-in-traefik-configuration-in-pangolin/478)
**Author:** [@hhf.technoloy](https://forum.hhf.technology/u/hhf.technoloy)\ **Replies:** 25\ **Last updated:** [January 22, 2026, 3:12am UTC](https://forum.hhf.technology/t/security-and-performance-enhancements-in-traefik-configuration-in-pangolin/478 "2026-01-22T03:12:00Z")
Enhanced Traefik Configuration Structure and Security Implementation Guide Let me explain the new folder structure and organization that has been implemented to enhance Traefik’s configuration management, security, and m… [Next page](https://forum.hhf.technology/c/networking/51.md?page=1)