PROJECTS & TECHNICAL NOTES

Projects and technical notes

Here is the full list of work behind BiXCore, from the day-to-day network to the Windows domain and the Proxmox lab. I have grouped related topics together so it is easier to find an individual project or troubleshooting case.

Some projects are in daily use; others are things I tested once or want to explore next. I keep the results and plans in their own sections so they are easy to find.

Network and services

The gateway, DNS and DHCP, wireless and wired networking, the NAS and the maintenance work that keeps it all running.

OPNsense, IPv6 and WireGuard

The main gateway, IPv6 prefix delegation, remote access and firewall troubleshooting.

DNS, DHCP, DDNS, ACME and guest access

Resolver design, domain lookups, dynamic DNS, certificates and guest-network access.

Managed switching, Wi-Fi and LLDP

VLAN handling, enterprise Wi-Fi, LLDP and switch-side IPv6 issues.

NAS services, containers and recovery

Docker networking, reverse proxy, IPv6 recovery and service updates.

Firewall security operations and resilience

OS updates, traffic inspection, monitoring and problems found after reboots.

Filtering, TLS inspection and reporting

What I've tested so far and what I want to explore with controlled HTTPS traffic.

Inspection performance on the N305

The planned throughput and CPU measurements, including multi-core processing if available.

Windows Server and identity

Active Directory, certificate enrollment, EAP-TLS, Windows client management, Linux and Android integration, and monitoring.

Windows Server, AD CS and NDES

Domain controllers, certificate services, SCEP and RADIUS integration.

Certificate-based network access

EAP-TLS on wired and wireless clients, CRL checks and directory failover.

Windows GPO, WinRM, WAC, LAPS and Sysmon

Client deployment, remote management and security tooling through Group Policy.

Kubuntu, Linux and Android MDM identity

AD integration, certificate renewal, SCEP enrollment and enterprise Wi-Fi.

Windows monitoring, backup and recovery

Prometheus, Grafana dashboards, System State backup and recovery planning.

Virtualization and firewall tests

How the Proxmox host was built, the storage problems I ran into, the different firewalls I tested and the GPU passthrough experiments.

Proxmox host, UEFI Dual Boot, ZFS and directory integration

Dual boot, host networking, storage migration and directory-based login.

Firewall laboratory — initial case study

The virtual lab layout, client VMs and first routing and NAT tests.

MikroTik, pfSense, Sophos, VyOS, FortiGate, OpenWrt, IPFire

What I installed, configured and tested on each firewall platform.

Intel iGPU passthrough, EDID and KRDP

GPU passthrough, a display-resolution problem and remote desktop troubleshooting.

Common tests, isolation boundaries and recovery

A consistent approach to DHCP, NAT, management access and negative-path testing.

The hardware and my next tests

I use a mixture of dedicated networking equipment and reused computers. These two pages give a clearer picture of the setup and where I want to take it next.

Hardware and lab setup

The systems I use and how they fit into the projects.

What's next

Follow-up checks and new experiments, kept separate from completed work.

About the author

I’m Felix Bistriker, an engineer with a professional background in electronic security systems. My About me page explains the experience and training behind BiXCore.

Earlier work and technical notes

I've kept detailed working notes while building BiXCore, including the first installations, the fixes that followed and configurations I've since replaced. These indexes help connect that history to the projects above.

Barox Config Tool

Documentation for this project is being reorganized. I will add it here separately when it is ready.

← Home