latest 2026-11-01 since 2026

A collection of interesting things.

router — conntrack top
connections 12/386 · order: bytes · every 2s
down 31.4 Mbit/s   up 2.1 Mbit/s   new 7/s

PR   ZONE  SOURCE     DESTINATION            STATE          RATE  BYTES
tcp  lan   tv         video-cdn.example:443  ESTABLISHED  3.1M/s   2.4G
udp  vlan  console    games-cdn.example:443  ASSURED      720K/s   780M
tcp  lan   server     backup.example:443     ESTABLISHED  410K/s   164M
udp  wg    phone      music.example:443      ASSURED       40K/s    41M
tcp  vlan  laptop     meet.work.example:443  ESTABLISHED  180K/s    22M
tcp  lan   mac        updates.os.example:443 ESTABLISHED  950K/s   8.7M
udp  lan   speaker    radio.example:443      ASSURED       16K/s   6.9M
tcp  lan   mac        code.example:443       TIME_WAIT         -   212K
tcp  lan   phone      push.example:5223      ESTABLISHED       -    96K
udp  lan   wifi-ctrl  firmware.example:443   ASSURED        2K/s    61K
tcp  vlan  laptop     login.work.example:443 SYN_SENT          -    120
tcp  lan   tv         telemetry.example:443  CLOSE             -   1.1K

sort: [b]ytes [r]ate [a]ge
2026-11-01 · 3 min Inside the router: zones, nftables, Kea and unbound The technical side of my NixOS home router: zones and VLANs, an nftables firewall, Kea for DHCP and unbound for DNS, all from one config.