- SELinux Enabled
  - Sysctl tuning applied
  - Inbound/Outbound/Forward iptables rules enabled
  - ipset iptables rules enabled
  - iptables intercept rules to route all ntp/dns over VPN
    to VPS nodes.
  - Unbound DNS overriding many spammy domains
  - tinc vpn enabled to multiple VPS nodes.
  -- Each VPS node load balancing to multiple datacenter open resolvers that
     are NOT OpenDNS or Google.
  - ip route blackhole about 20k bad networks from firehol on github
  - syslog to internal host
  - Surricata IDS logging to syslog
  - tc cbq traffic shaping enabled
  - haproxy L4 vips for sending select traffic to select squid proxies.
  - power conditionor / ups enabled, one for router, one for cable modem.