Latest Posts
- SkillSeal: Mind the Gap (2026-02-20)
- Building an Enterprise Anycast CDN at the Network Edge: Section 8 (2026-02-19)
- 402 Payment Required (2026-02-16)
- Kill the Default Route (2026-02-15)
- Building an Enterprise Anycast CDN at the Network Edge: Section 7 (2026-02-12)
- Pay-Through: An x402 Extension for Rate-Limited APIs (2026-02-07)
- When Code Costs Nothing (2026-02-07)
- Building an Enterprise Anycast CDN at the Network Edge: Section 6 (2026-02-05)
- Building an Enterprise Anycast CDN at the Network Edge: Section 5 (2026-01-29)
- Building an Enterprise Anycast CDN at the Network Edge: Section 4 (2026-01-22)
- MailTaste: Finally Understanding Who's Sending Email as You (2026-01-21)
- The Clipboard Bridge (2026-01-15)
- Building an Enterprise Anycast CDN at the Network Edge: Section 3 (2026-01-15)
- Introducing SSLurp: A Certificate Checker You Didn't Know You Needed (2026-01-12)
- Building an Enterprise Anycast CDN at the Network Edge: Section 2 (2026-01-08)
- Building an Enterprise Anycast CDN at the Network Edge: Section 1 (2025-12-24)
- Wildcard Certificates - The Misunderstood Shortcut (2025-10-23)
- A Flurry of Posts, A Moment to Breathe (2025-05-29)
- Taking Back Control: CAA Records (2025-05-17)
- DNSSEC Part 3: Migrations and Leveraging Trust (2025-05-10)
- DNSSEC Part 2: The Nuts and Bolts (2025-05-03)
- DNSSEC Part 1: Laying the Foundation (2025-04-26)
- Thinking About "It Depends" (2025-04-15)
- The Unpopular Opinion (2025-04-12)
- Behind the Build (2025-04-09)
- A Network Edge Philosophy (2025-04-07)
- Building This Static Site Generator (2024-04-06)
The Workshop @ esoup.net
This is my digital workshop — where I build tools, write about networks, and work through ideas in the open. Thirty years in networking and systems, and I'm still finding things worth building and worth questioning.
What's on the Workbench
Tools & Products. I build things that solve real problems and ship them. DNSlurp is a DNS lookup API. SSLurp checks certificates. MailTaste decodes email authentication. These aren't demos — they're running in production.
Network Architecture. An eight-part series on building an enterprise anycast CDN at the network edge. Theory grounded in operational experience — BGP, anycast, trust boundaries, and what happens when things fail.
Protocols & Payments. HTTP 402 has been "reserved for future use" for almost thirty years. I built a working implementation. The Pay-Through pattern turns API rate limits into protocol-native payment negotiation. You can test it yourself.
DNS & Certificates. DNSSEC walkthroughs, CAA records, wildcard certificates, and the things people get wrong about all of them.
The Perspective
I question defaults. Default routes, default configurations, default assumptions about how systems should work. If something has been done a certain way for twenty years, that's not a reason to keep doing it — it's a reason to look harder.
Everything here comes from operating real systems at scale. The writing is opinionated because the experience behind it is specific.