INSIGHTS

EVPN Insights

Technical writing on what VPNs can protect, where they fail, and how private networking should be designed.

Why a VPN kill switch should fail closed
KILL SWITCH

Why a VPN kill switch should fail closed

Fail-open versus fail-closed network controls — and why “protection enabled” should mean traffic does not silently escape when a tunnel drops.

August 2, 2026
DNS leaks explained: why VPN DNS matters
DNS

DNS leaks explained: why VPN DNS matters

How DNS queries escape tunnels, what private resolvers change, and why “connected” is not enough if name resolution still leaves the protected path.

July 26, 2026
WireGuard, OpenVPN and IKEv2: the real trade-offs
WIREGUARD

WireGuard, OpenVPN and IKEv2: the real trade-offs

A practical comparison of modern VPN transports — handshake cost, roaming, complexity and when “older” protocols still matter.

July 18, 2026
What a VPN can — and cannot — protect
THREAT MODEL

What a VPN can — and cannot — protect

A clear threat-model view of VPN protections and the limits people often overlook — without marketing exaggeration.

July 10, 2026