Glossary
Clear definitions of home server, networking, storage, and self-hosting terminology.
2FA / MFA(Two-Factor / Multi-Factor Authentication)
Requiring more than just a password to log in — typically something you know plus something you have.
ACME(Automatic Certificate Management Environment)
The protocol used to automatically obtain and renew free TLS certificates, most famously from Let's Encrypt.
ARC / L2ARC(Adaptive Replacement Cache)
ZFS's in-RAM read cache (ARC), optionally extended onto an SSD as L2ARC.
Backup
A separate, recoverable copy of your data kept to protect against loss, corruption or disaster.
Bit Rot
The slow, silent corruption of stored data over time due to hardware imperfections.
BorgBackup(Borg)
A deduplicating backup tool focused on efficient, encrypted incremental archives.
Btrfs
A modern Linux filesystem with snapshots, checksums and built-in RAID-like features.
CGNAT(Carrier-Grade NAT)
An ISP setup where many customers share one public IP, making inbound connections impossible without workarounds.
CGNAT(Carrier-Grade NAT)
When your ISP puts you behind shared public IP addresses, blocking direct inbound connections.
Checksum
A small fingerprint of data used to detect corruption or verify integrity.
cloud-init
A tool that configures a fresh VM on first boot — setting hostname, users, SSH keys and packages automatically.
Compression
Encoding data to take up less space, often transparently at the filesystem level.
Container
An isolated, self-contained package that bundles an application with everything it needs to run.
Container Healthcheck
A command Docker runs periodically to determine whether a container is actually working, not just running.
Container Image
A read-only, versioned template that a container is created from.
Container Registry
A repository that stores and distributes container images, such as Docker Hub or GHCR.
Cron
The classic Unix scheduler that runs commands automatically at set times.
Deduplication
Storing only one copy of identical data blocks to save space, especially in backups.
Default Gateway
The device (usually your router) that traffic is sent to when leaving the local network.
DHCP(Dynamic Host Configuration Protocol)
A service that automatically assigns IP addresses and network settings to devices as they join the network.
DNS(Domain Name System)
The system that translates human-readable names like example.com into the IP addresses computers use.
Docker
A platform for packaging applications and their dependencies into lightweight, portable containers.
Docker Compose
A tool that defines and runs multi-container applications from a single declarative YAML file.
Docker Volume
Persistent storage managed by Docker that keeps container data safe across restarts and updates.
Dockerfile
A text recipe that describes how to build a custom container image step by step.
DoH / DoT(DNS over HTTPS / DNS over TLS)
Encrypting DNS queries so they can't be read or tampered with by your network or ISP.
Dynamic DNS(DDNS)
A service that keeps a domain name pointed at your home's changing public IP address.
ECC RAM(Error-Correcting Code Memory)
Memory that detects and corrects common data errors on the fly for greater reliability.
ECC RAM(Error-Correcting Code Memory)
Memory that detects and corrects single-bit errors, improving data integrity on always-on servers.
ext4
The default, rock-solid Linux filesystem used by most distributions.
Firewall
Software or hardware that controls which network traffic is allowed in or out based on rules.
HBA(Host Bus Adapter)
A card that adds many drive ports, commonly flashed to pass disks straight through to ZFS.
HDD(Hard Disk Drive)
A spinning magnetic drive offering large capacity at a low price per terabyte.
Headless
A server that runs without a monitor, keyboard or graphical desktop.
Helm
The package manager for Kubernetes that bundles manifests into reusable charts.
Home Server
A computer you run at home to provide services such as file storage, media streaming, backups or self-hosted apps to your devices.
Homelab
A personal lab environment at home used to learn, experiment with and run IT infrastructure.
Hot-Swap
The ability to remove and insert drives while the system is powered on, without shutting down.
Hypervisor
Software that creates and manages virtual machines by allocating physical resources between them.
Immutable OS
An operating system image that is replaced atomically on update rather than patched in place.
IOMMU(Input-Output Memory Management Unit)
A CPU feature that maps device memory safely, enabling PCI passthrough to virtual machines.
IP Address
A numeric label that identifies a device on a network, such as 192.168.1.10 (IPv4).
iSCSI
A protocol that presents remote storage over the network as if it were a local block device.
JBOD(Just a Bunch of Disks)
A group of drives exposed individually, without hardware RAID combining them.
Kubernetes(K8s)
A powerful platform for orchestrating containers across many machines, with self-healing and scaling.
Kubernetes(K8s)
An orchestration platform that automates deploying, scaling and managing containerized applications across a cluster.
KVM(Kernel-based Virtual Machine)
The Linux virtualization technology that runs full virtual machines with near-native performance.
Let's Encrypt
A free, automated certificate authority that issues the TLS certificates used to enable HTTPS.
Load Balancer
A component that spreads incoming requests across multiple servers or services.
LXC(Linux Containers)
Lightweight system containers that behave like a small VM but share the host kernel.
M.2
A compact slot on a motherboard used mainly for NVMe or SATA SSDs.
MAC Address
A unique hardware identifier assigned to a device's network interface.
macvlan
A Docker network mode that gives a container its own MAC address and IP on your physical LAN.
MTU(Maximum Transmission Unit)
The largest packet size a network link will carry without fragmenting it.
NAS(Network-Attached Storage)
A dedicated storage device connected to your network that lets multiple devices store and access files centrally.
NAT(Network Address Translation)
The router technique that lets many private devices share one public IP address.
NFS(Network File System)
A Unix-native network file-sharing protocol offering high performance between Linux systems.
NVMe
A fast storage interface for SSDs that connects over PCIe, far quicker than SATA.
NVMe(Non-Volatile Memory Express)
A fast storage interface designed for SSDs, offering much lower latency than SATA.
OAuth / OIDC(Open Authorization / OpenID Connect)
Standards that let apps delegate authentication and authorization to a trusted identity provider.
PCI Passthrough
Giving a virtual machine direct, exclusive access to a physical PCIe device such as a GPU or HBA.
PCIe(Peripheral Component Interconnect Express)
The high-speed expansion bus that connects GPUs, NVMe drives and network cards to the CPU.
PoE(Power over Ethernet)
Delivering electrical power to devices over the same Ethernet cable that carries data.
PoE(Power over Ethernet)
Delivering electrical power to devices like access points and cameras through Ethernet cables.
Port Forwarding
A router rule that directs incoming internet traffic on a specific port to a device on your local network.
Portainer
A web dashboard for managing Docker containers, images, volumes and networks.
PXE Boot(Preboot Execution Environment)
Booting a computer from the network instead of a local disk, using DHCP and TFTP to load an OS image.
RAID(Redundant Array of Independent Disks)
A method of combining multiple drives so they act as one, improving performance and/or protecting against drive failure.
RAID-Z
ZFS's software parity RAID, available as RAID-Z1, Z2 and Z3 for one, two or three parity disks.
Restic
A modern backup program that creates encrypted, deduplicated, versioned backups.
Restic
An open-source backup program that deduplicates, encrypts and verifies snapshots to local or cloud storage.
Reverse Proxy
A server that sits in front of your services, routing requests by domain name and handling TLS certificates.
rsync
A fast tool that copies and synchronizes files, transferring only what changed.
S.M.A.R.T.(Self-Monitoring, Analysis and Reporting Technology)
A built-in drive health system that reports metrics and early warning signs of failure.
Samba
The Linux implementation of the SMB protocol, used to share files with Windows, macOS and Linux.
SATA
The common interface for connecting hard drives and 2.5-inch SSDs to a motherboard.
Self-Hosting
Running software on hardware you control instead of relying on third-party cloud services.
SLOG / ZIL(Separate Log / ZFS Intent Log)
A fast device that accelerates synchronous writes in ZFS by holding the intent log separately.
SMB(Server Message Block)
A network file-sharing protocol used by Windows, macOS and Linux to access shared folders.
Snapshot
A point-in-time, read-only copy of a filesystem or volume that lets you roll back changes instantly.
SSD(Solid-State Drive)
Flash-based storage with no moving parts, far faster and quieter than a hard drive.
SSH(Secure Shell)
An encrypted protocol for securely logging into and managing servers over a network.
SSO(Single Sign-On)
Logging in once with a central identity provider to access many separate applications.
Static IP
A fixed IP address that never changes, either set on the device or reserved on the router.
Subnet
A logical subdivision of an IP network, defined by a mask that separates the network and host portions of an address.
Swap
Disk space used as overflow when a system runs low on RAM.
systemd
The init system on most Linux distributions that starts, stops and supervises services.
TDP(Thermal Design Power)
A rough measure of how much heat (and roughly power) a CPU produces under load.
Thin Provisioning
Allocating storage on demand, so volumes can be defined larger than the physical space currently used.
TLS/SSL
The encryption that secures connections, shown as the padlock and https:// in your browser.
TOTP(Time-based One-Time Password)
A six-to-eight digit code that changes every 30 seconds, used as a second authentication factor.
TRIM
A command that tells an SSD which blocks are no longer in use so it can maintain performance and endurance.
UPS(Uninterruptible Power Supply)
A battery backup that keeps your server running briefly during a power cut and enables a safe shutdown.
Virtual Machine(VM)
A software-based computer that runs its own operating system on top of physical hardware via a hypervisor.
VLAN(Virtual LAN)
A way to split one physical network into isolated logical networks for security and organization.
VLAN(Virtual LAN)
A logical network segment that isolates traffic on shared physical switches.
VPN(Virtual Private Network)
An encrypted tunnel that lets you securely access your home network from anywhere as if you were local.
Wake-on-LAN(WoL)
A feature that powers on a computer remotely by sending it a special network packet.
Watchtower
A tool that automatically updates running Docker containers to their latest images.
ZFS
An advanced filesystem and volume manager offering data integrity, snapshots, compression and software RAID.