Ten years on: migration scars, defaults, and operator truth

Netfilter hooks, tables, and operator-grade change discipline

iptables, BIND 9, Squid, and the box the flat finally trusts