Networking — Things Worth SharingPosts tagged Networking.https://cloudsecop.net/Network policy L4 — blocking non-HTTP, DoH bypass, and app ruleshttps://cloudsecop.net/en/blog/network-policy-l4/https://cloudsecop.net/en/blog/network-policy-l4/Network policy deep dive: blocking non-HTTP (SSH, RDP, SMTP), preventing DoH bypass, app rules for SaaS, WARP keeping user traffic on Gateway, prod checklist, hardening playbook.Mon, 19 May 2025 00:00:00 GMTCloudflareCloudflare OneGatewayNetworkingZero TrustKhaVanMagic WAN: connecting sites and clouds over the backbonehttps://cloudsecop.net/en/blog/magic-wan-bgp-over-gre/https://cloudsecop.net/en/blog/magic-wan-bgp-over-gre/Magic WAN deep dive: a network-layer replacement for SD-WAN/MPLS. Four tunnel options (IPsec, GRE, Anycast IP, CNI), BGP peering, multi-cloud, realistic migration playbook.Tue, 22 Apr 2025 00:00:00 GMTCloudflareCloudflare OneMagic WANNetworkingSD-WANKhaVanCloudflare Tunnel deep dive — safely exposing internal serviceshttps://cloudsecop.net/en/blog/cloudflare-tunnel-deep-dive-guide/https://cloudsecop.net/en/blog/cloudflare-tunnel-deep-dive-guide/cloudflared daemon, ingress rules, HA replicas, non-HTTP (SSH/RDP/SMB), VPN migration, and troubleshooting six common cases. Tunnel is the connectivity foundation for Zero Trust.Wed, 26 Mar 2025 00:00:00 GMTCloudflareCloudflare OneCloudflare TunnelNetworkingKhaVan