Blog

Field notes from tunnel ops

Short, practical write-ups on the failure modes we see every day — and how to catch them before your users do.

August 20, 20266 min read

Why ping monitoring lies about your VPN

Your monitoring says the server is up. Your users say the VPN is broken. Both are telling the truth — here is why, and what actually fixes it.

Read article

August 22, 20267 min read

What exit IP pooling is (and how to catch it before your users do)

Your node advertises one IP but quietly exits from another. Here is how pooling happens, why panels rarely tell you, and a practical detection playbook.

Read article

August 24, 20265 min read

WireGuard handshake health: what the numbers actually mean

latest-handshakes is the most misunderstood field in wg output. A practical guide to handshake ages, retry storms, and what to alert on.

Read article