FreeBSD Articles

How to run a FreeBSD server with two completely independent internet uplinks - a physical provider and a BGP tunnel - using dual-FIB routing tables, PF’s rtable and reply-to directives, and a single bridge that carries NAT’d, routed, and pure public jail traffic simultaneously.

The second in the FreeBSD Foundationals series. This one covers ZFS from philosophy to practice: why it exists, how pools and datasets work, what checksumming and self-healing actually do, how to tune recordsize, compression, and atime, how encryption works with key management, how snapshots and the hidden .zfs directory give you time travel, and how ZFS send/recv turns backup and migration into a solved problem. Includes a look at sanoid/syncoid for automated snapshot management.

The first in a series on FreeBSD fundamentals. This one covers Jails from the ground up: why they exist, how classic Jails differ from VNET Jails, what epair interfaces actually are, how bridges tie it all together, and what devfs rules do for your isolation story. Practical configurations included.

What looked like a simple nginx config change turned into a tour through SSL library incompatibilities, pf firewall rules for a new protocol, and a multi-worker affinity problem that only shows up under real traffic. A complete guide to getting HTTP/3 working with nginx 1.28 on FreeBSD 15.0 inside a Bastille jail.

Using a JeeLink USB stick inside a FreeBSD jail to bridge legacy LaCrosse temperature and humidity sensors to Home Assistant over MQTT

A comprehensive guide to configuring PF on FreeBSD, covering core concepts, practical configurations for jails and dual-stack networking, and advanced techniques including brute-force protection and bastion host setups with authpf.

A clean approach to integrating FreeBSD 15 into a FreeIPA realm using native components - Kerberos for authentication, LDAP for identity, and no local user management.

Running CryptPad in a FreeBSD VNET jail with isolated networking, NAT via PF, and Caddy for TLS termination.

A technical deep-dive into running a modern, secure mail server on FreeBSD 15.0 using VNET jails, ZFS encryption, and GeoIP-aware firewalling.

Using MaxMind’s GeoLite2 database with FreeBSD’s PF firewall to restrict client-facing services to specific countries, reducing brute-force attempts and log noise while keeping essential services globally accessible.