4 published articles
What included DDoS protection really filters, why your own firewall can't stop volumetric floods, and the server-side rate limiting that handles Layer 7 attacks.
Why published Docker ports ignore ufw and nftables INPUT rules, how to fix it with DOCKER-USER and localhost binds, plus real container hardening on a VPS.
How origin server IPs leak past Cloudflare and other proxies — DNS history, CT logs, mail, scanners — plus firewall, nginx and mTLS fixes that actually work.
A working nftables baseline for Linux VPS: inet tables, IPv6-safe ICMP rules, SSH allowlists, rate limiting, Docker conflicts, persistence and lockout recovery.
