An advanced systems administration and networking series covering network bonding, firewalling, DNS resolution, enterprise storage, web services, and security hardening.
The Linux Foundation Certified Engineer (LFCE) is the advanced certification that sat above the LFCS. It was designed for professionals who architect and manage multi-system environments, focusing on services, networking, and automation. However, the most critical fact for any candidate is this: The LFCE exam was officially retired on May 1, 2022 . The Linux…
The LFCE was a performance-based exam that tested advanced Linux engineering skills through hands-on tasks. Unlike the multiple-choice format of entry-level certifications, the LFCE required candidates to solve real problems from the command line on live systems. The exam was designed for engineers with 3–5 years of Linux experience who needed to validate their ability…
The previous chapters covered the LFCE exam structure and its retirement. This chapter covers the practical foundation for studying the advanced skills the LFCE tested: the practice lab. A performance-based exam cannot be prepared by reading. The candidate must type the commands, break the services, and recover the systems. The lab is the environment where…
The previous chapter introduced the practice lab options at the high level. This chapter dives into the two practical implementation paths: the virtual machines (the full isolation, the own kernel) and the containers (the lightweight, the shared kernel). The LFCE tested the multi-system scenarios: the DNS, the DHCP, the PXE, the centralized authentication. The virtual…
The LFCE exam is retired, but its curriculum remains the benchmark for advanced Linux engineering. The Networking domain (15%) required understanding how to connect and secure systems across different trust boundaries. Network architecture is the foundation for those tasks: a LAN is the trusted internal network, a WAN connects geographically separated sites, and a DMZ…
Network topology is not an abstract diagram exercise. It is the physical and logical arrangement that determines how packets travel, where failures propagate, and what it costs to scale. For a Linux engineer preparing for the LFCE, topology knowledge underpins every routing decision, every firewall rule placement, and every troubleshooting path you will trace. The…
IPv4 addressing has undergone exactly one fundamental architectural change in its history: the transition from classful to classless routing. Before 1993, every address carried its class in its first octet. A router could look at a packet’s destination and know, without any additional configuration, whether the network portion was 8, 16, or 24 bits long….
Subnetting is the operation that turns a single allocated address block into multiple logical networks. It is the practical application of the classless addressing model examined in the previous chapter: you take a prefix, extend the network portion by borrowing bits from the host portion, and produce smaller prefixes within the original range. For the…
CIDR notation is the syntax that made classless routing operational. It compresses the essential information of an IP prefix—the network address and the length of the network portion—into a single compact string: 192.168.1.0/24. The slash is not decoration. It separates the address from the prefix length, and that prefix length is the number of leading…
Variable Length Subnet Masking is the technique that turns a single address block into a hierarchy of differently sized subnets. Fixed-length subnetting forces every subnet to use the same mask, which means every subnet holds the same number of hosts. This works when all segments have identical requirements. It fails when a network contains a…