SPIFFE and SPIRE on Linux: Workload Identity and mTLS Without Long-Lived Secrets (2026)
SPIFFE and SPIRE give Linux workloads short-lived, verifiable identities (SVIDs) for mTLS and JWT auth, replacing long-lived API keys and secrets.
Zero Trust Articles
Zero Trust Networking on Linux with WireGuard, nftables, and Overlay Networks
Build a Zero Trust network on Linux using WireGuard for encrypted tunnels, nftables for micro-segmentation, and overlay networks like Tailscale and NetBird. Includes production configs, monitoring, and a phased deployment strategy.
nftables Firewall Hardening Guide: Zero-Trust Rulesets & Automated Threat Response
A hands-on guide to building production-grade, zero-trust firewall architectures with nftables on Linux. Covers hardened rulesets, threat intelligence sets, SYN flood protection, per-IP rate limiting, Fail2Ban integration, and Ansible deployment automation.