Why BGP Route Reflectors Break Silently in Multi-AS Fabrics
A route reflector cluster that looks healthy can still black-hole traffic. Here's how to catch it before your peers do.
Read more →
root@netsec-hub:~$ ./init --domain=network,security,python
NETWORK ENGINEER HUB
Enterprise Network & Cybersecurity Engineering — Automated with Python.
Field notes, tutorials, and tools for engineers working across routing, switching, Fortinet, cloud security, and infrastructure automation — grounded in real production problems, not generic theory.
01 // Insights
Featured Articles
Deep dives on real-world networking and security failures.
FortiGate Reverse Path Check Failures: A Field Guide
Asymmetric routing plus strict RPF equals dropped packets and confused engineers. A troubleshooting checklist that actually works.
Read more →Zero Trust in Practice: Segmenting a Flat Enterprise VLAN
Moving from a flat trust model to micro-segmentation without a weekend outage — a phased migration plan.
Read more →02 // Hands-on
Latest Tutorials
Step-by-step, hands-on, and reproducible.
Automating FortiGate Backups with Python and the REST API
Schedule, encrypt, and version-control your FortiGate configs without ever opening the GUI.
Start tutorial →Building an ADVPN Hub-and-Spoke Topology on FortiGate
Dynamic spoke-to-spoke tunnels that actually converge — configuration, routing, and failure testing.
Start tutorial →A Terraform Module for a Hardened AWS VPC with Security Hub Enabled
A reusable module for a production-ready VPC: private subnets, flow logs, and Security Hub baked in.
Start tutorial →03 // Grab & go
Popular Downloads
Scripts, modules, and cheat sheets ready to use.
-
.py
subnet-calculator.py CLI subnet and CIDR calculator with VLSM support.Download →
-
.tf
aws-secure-vpc.tf Terraform module for a hardened AWS VPC baseline.Download →
-
.pdf
fortigate-cli-cheatsheet.pdf One-page reference for the most-used FortiOS CLI commands.Download →
04 // Utilities
Latest Tools
Browser-based utilities for everyday engineering work.
Coming soon
CIDR Calculator
Instant subnet math: network, broadcast, host range, and wildcard mask.
Coming soon
BGP Path Analyzer
Visualize AS-path attributes and best-path selection logic.
Coming soon
FortiGate Config Builder
Generate baseline FortiOS CLI config from a guided form.