# Networking & Digital Security

NSA/Pentagon-grade network security resources, hardening guides, and implementation references.

## Structure

```
government-guides/   NSA, DISA, NIST, CISA publications and where to find them
plan9-security/      Plan 9 cluster hardening, factotum, dp9ik, VLAN isolation
hardware/            Firewalls, switches, VPN appliances, IDS hardware, TAPs
zero-trust/          ZTA frameworks (NIST, BeyondCorp, DoD), Tailscale overlay
host-hardening/      Linux kernel, systemd, auditd, nftables, SSH, sysctl
monitoring/          IDS/IPS, SIEM, packet capture, beacon detection, DNS analytics
configs/             Ready-to-use configuration templates and rulesets
```

## Priority Reading Order

1. NSA Network Infrastructure Security Guide
2. NSA Top Ten Cybersecurity Mitigation Strategies
3. NSA/CISA Top Ten Misconfigurations
4. NIST SP 800-207 (Zero Trust Architecture)
5. CISA Zero Trust Maturity Model v2
6. NSA Zero Trust: Network and Environment Pillar
7. NSA Configuring IPsec VPNs
8. NSA Eliminating Obsolete TLS
9. NSA DNS Security (all three docs)
10. DISA STIGs for your devices
11. CIS Benchmarks for anything STIGs don't cover