A Raspberry Pi Wi-Fi hotspot setup with hostapd, dnsmasq, Xray transparent proxying, DNS pollution checks, nftables TProxy, and client-side validation.

How cloudflared was moved from a direct home network exit to an Xray proxy exit, with nftables redirection, routeOnly sniffing, and Cloudflare edge routing checks.

A field note on using a Raspberry Pi as a side router with Tailscale exit routing, Xray transparent proxying, DNS handling, nftables rules, and rollback checks.