{"id":10362,"date":"2026-09-07T07:20:00","date_gmt":"2026-09-07T05:20:00","guid":{"rendered":"https:\/\/www.lukaswojcik.com\/blog\/?p=10362"},"modified":"2026-09-04T23:51:32","modified_gmt":"2026-09-04T21:51:32","slug":"three-directions-a-zone-matrix-hides","status":"publish","type":"post","link":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/","title":{"rendered":"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic"},"content":{"rendered":"

The zone-based firewall replaced a list of rules per interface with a grid, and the grid is the honest picture. Every zone can talk to every zone, each pairing is its own decision, and the number of decisions grows with the square of the zones. Six zones are thirty-six directions.<\/p>\n

A plan usually names eight of them. The remaining twenty-eight are not unplanned in the sense of being open – they inherit a default – but they are unexamined, and three of them decide whether the network is secure, whether it works, and whether the difference is noticeable.<\/p>\n

\n\"A
Read from the row to the column. The three marked cells are the ones a plan almost never mentions.<\/figcaption><\/figure>\n

From Rules per Interface to Cells in a Grid<\/h2>\n

The older model asked what may leave a network. The zone model asks, for every ordered pair of zones, what may cross – which is the same question posed thirty-six times instead of six. Zones ship predefined, among them Internal, Gateway, VPN, Hotspot, DMZ and External, and every VLAN lands in exactly one of them.<\/p>\n

What makes the grid useful is also what makes it easy to misread: a cell says nothing about the cell mirrored across the diagonal. LAN to IoT and IoT to LAN are two separate decisions, and the whole point of the next section is that they are far less symmetric than they look.<\/p>\n

Replies Are Not a Direction<\/h2>\n

The firewall tracks connections. A session that was allowed to open is allowed to answer, and the answer never consults the reverse cell – it matches the existing state and passes. Which means IoT to LAN can stay closed while a phone on the LAN talks to a bulb in the IoT zone all day.<\/p>\n

zones n = 6          directions n² = 36\nplanned              ~ 8\ndiagonal             6   (inside a zone, no policy applies)\n\nLAN 10.0.1.20:51344  →  IoT 10.0.30.7:80      allowed by LAN → IoT\nIoT 10.0.30.7:80     →  LAN 10.0.1.20:51344   ESTABLISHED, no rule needed<\/code><\/pre>\n
The mistake this prevents is a common one and an expensive one: opening IoT to LAN so that replies work. Nothing needed it, and the cell that was opened now permits a compromised device to start its own connections into the network that was being protected. A cell is only ever needed by whoever speaks first.<\/p>\n
The Zone That Must Not Be Closed<\/h2>\n
The gateway is a zone of its own, and almost everything a client needs before it can do anything lives there: DHCP, DNS, and NTP. Closing IoT to gateway is an appealing line in a plan – the IoT zone should not talk to infrastructure – and it produces a zone that associates, gets an address, shows full signal and resolves nothing.<\/p>\n
The failure is silent in the worst way. Nothing reports an error; requests simply time out, so devices look slow rather than blocked, and the search starts with the wireless and the access point rather than with the one cell that caused it. If that direction is to be narrowed, it is narrowed by port – 53 and 123 to the gateway address – not closed.<\/p>\n
The Diagonal Nobody Looks At<\/h2>\n
Traffic that begins and ends inside one zone never reaches a policy. Forty devices in an IoT zone are a flat network to one another, and the isolation the matrix appears to promise stops at the zone boundary. A bulb with an old firmware sees the other thirty-nine, and the firewall was never asked.<\/p>\n
There are two ways out, and both live outside the matrix. Client isolation on the wireless network stops devices on the same SSID from reaching each other; splitting the zone gives the traffic a boundary to cross. And there is a third case that neither fixes: two devices on the same VLAN on the same switch exchange frames the gateway never sees, which is worth remembering before any rule is written to govern them.<\/p>\n
Blocking and Rejecting Look Different from Inside<\/h2>\n\n\n\n\n\n\n\n\n\n
Direction<\/th>\nUsual intent<\/th>\nWhat gets forgotten<\/th>\n<\/tr>\n<\/thead>\n
IoT → Gateway<\/td>\nblock it, IoT has no business with infrastructure<\/td>\nDNS, DHCP and NTP live there; the zone connects and resolves nothing<\/td>\n<\/tr>\n
IoT → LAN<\/td>\nopen it so replies work<\/td>\nreplies need no cell; the opening lets the zone start its own sessions<\/td>\n<\/tr>\n
IoT → IoT<\/td>\nnot considered at all<\/td>\nopen by default, and every device in the zone can reach every other<\/td>\n<\/tr>\n
Cameras → WAN<\/td>\nblock it, cameras stay local<\/td>\nNTP goes with it; timestamps drift and firmware never updates<\/td>\n<\/tr>\n
Guest → Gateway<\/td>\nblock it, guests get internet only<\/td>\nthe portal, DHCP and DNS are all gateway; the network joins and stalls<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Every one of those rows also has a presentation, and that is what the two blocking actions are for. Block drops the packet without a word, so the client waits out its timeout – thirty seconds of nothing before an error that names the wrong cause. Reject answers immediately, and the application fails at once and says so.<\/p>\n
For the boundary to the internet, silence is right: an unanswered probe reveals less than a refusal. For directions inside the network, refusal is right, because every one of those failures will be diagnosed by a person, and a timeout is the least informative thing a firewall can produce.<\/p>\n
What the Matrix Cannot Express<\/h2>\n
Port forwards do not enter the grid the way the grid suggests. Traffic arriving from outside is translated before the zone policies see it, so what a policy examines is the destination after translation, not the public address that was dialled. Reaching the same service from inside by its public name is the related case and needs NAT reflection – a setting, not a cell.<\/p>\n
Multicast is outside the model entirely. Discovery protocols such as mDNS do not travel between zones because a policy blocks them but because multicast does not route; a printer visible only in the LAN needs the mDNS repeater turned on for both zones, and no cell will substitute for it. And VPN clients arrive in their own zone, which means a working tunnel with no route to anything is not a broken tunnel – it is a row in the matrix that nobody filled in.<\/p>\n","protected":false},"excerpt":{"rendered":"
Six zones make thirty-six directions, and a typical plan names eight of them. The three that decide whether the network works are replies, the gateway, and the diagonal.<\/p>\n","protected":false},"author":1,"featured_media":15155,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[91243,91707],"class_list":["post-10362","post","type-post","status-publish","format-standard","hentry","category-it-networks","tag-networking","tag-unifi"],"yoast_head":"\nUniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic - Lukas Wojcik - Blog<\/title>\n<meta name=\"description\" content=\"Zone-based firewalling in UniFi: why return traffic needs no rule, why blocking the gateway zone kills DNS, and why intra-zone traffic reaches no policy.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic - Lukas Wojcik - Blog\" \/>\n<meta property=\"og:description\" content=\"Zone-based firewalling in UniFi: why return traffic needs no rule, why blocking the gateway zone kills DNS, and why intra-zone traffic reaches no policy.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/\" \/>\n<meta property=\"og:site_name\" content=\"Lukas Wojcik - Blog\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-07T05:20:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/09\/hero-10362-three-directions-a-zone-matrix-hides-n.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"luky\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"luky\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/\"},\"author\":{\"name\":\"luky\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\"},\"headline\":\"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic\",\"datePublished\":\"2026-09-07T05:20:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/\"},\"wordCount\":1006,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\"},\"image\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/hero-10362-three-directions-a-zone-matrix-hides-n.png\",\"keywords\":[\"Networking\",\"UniFi\"],\"articleSection\":[\"IT & Networks\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/\",\"name\":\"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic - Lukas Wojcik - Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/hero-10362-three-directions-a-zone-matrix-hides-n.png\",\"datePublished\":\"2026-09-07T05:20:00+00:00\",\"description\":\"Zone-based firewalling in UniFi: why return traffic needs no rule, why blocking the gateway zone kills DNS, and why intra-zone traffic reaches no policy.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/hero-10362-three-directions-a-zone-matrix-hides-n.png\",\"contentUrl\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/hero-10362-three-directions-a-zone-matrix-hides-n.png\",\"width\":1200,\"height\":630,\"caption\":\"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/en\\\/it-networks\\\/three-directions-a-zone-matrix-hides\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/\",\"name\":\"Lukas Wojcik - Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/#\\\/schema\\\/person\\\/895f7604f9b6b71aad9bba33af28d0f9\",\"name\":\"luky\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\",\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\",\"contentUrl\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\",\"width\":424,\"height\":636,\"caption\":\"luky\"},\"logo\":{\"@id\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/lw-x2.jpg\"},\"sameAs\":[\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\"],\"url\":\"https:\\\/\\\/www.lukaswojcik.com\\\/blog\\\/author\\\/luky\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic - Lukas Wojcik - Blog","description":"Zone-based firewalling in UniFi: why return traffic needs no rule, why blocking the gateway zone kills DNS, and why intra-zone traffic reaches no policy.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/","og_locale":"en_US","og_type":"article","og_title":"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic - Lukas Wojcik - Blog","og_description":"Zone-based firewalling in UniFi: why return traffic needs no rule, why blocking the gateway zone kills DNS, and why intra-zone traffic reaches no policy.","og_url":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/","og_site_name":"Lukas Wojcik - Blog","article_published_time":"2026-09-07T05:20:00+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/09\/hero-10362-three-directions-a-zone-matrix-hides-n.png","type":"image\/png"}],"author":"luky","twitter_card":"summary_large_image","twitter_misc":{"Written by":"luky","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/#article","isPartOf":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/"},"author":{"name":"luky","@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9"},"headline":"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic","datePublished":"2026-09-07T05:20:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/"},"wordCount":1006,"commentCount":0,"publisher":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9"},"image":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/#primaryimage"},"thumbnailUrl":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/09\/hero-10362-three-directions-a-zone-matrix-hides-n.png","keywords":["Networking","UniFi"],"articleSection":["IT & Networks"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/","url":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/","name":"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic - Lukas Wojcik - Blog","isPartOf":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/#primaryimage"},"image":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/#primaryimage"},"thumbnailUrl":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/09\/hero-10362-three-directions-a-zone-matrix-hides-n.png","datePublished":"2026-09-07T05:20:00+00:00","description":"Zone-based firewalling in UniFi: why return traffic needs no rule, why blocking the gateway zone kills DNS, and why intra-zone traffic reaches no policy.","breadcrumb":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/#primaryimage","url":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/09\/hero-10362-three-directions-a-zone-matrix-hides-n.png","contentUrl":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/09\/hero-10362-three-directions-a-zone-matrix-hides-n.png","width":1200,"height":630,"caption":"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic"},{"@type":"BreadcrumbList","@id":"https:\/\/www.lukaswojcik.com\/blog\/en\/it-networks\/three-directions-a-zone-matrix-hides\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.lukaswojcik.com\/blog\/"},{"@type":"ListItem","position":2,"name":"UniFi Zone-Based Firewall: Return Traffic, the Gateway Zone and Intra-Zone Traffic"}]},{"@type":"WebSite","@id":"https:\/\/www.lukaswojcik.com\/blog\/#website","url":"https:\/\/www.lukaswojcik.com\/blog\/","name":"Lukas Wojcik - Blog","description":"","publisher":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.lukaswojcik.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.lukaswojcik.com\/blog\/#\/schema\/person\/895f7604f9b6b71aad9bba33af28d0f9","name":"luky","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg","url":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg","contentUrl":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg","width":424,"height":636,"caption":"luky"},"logo":{"@id":"https:\/\/www.lukaswojcik.com\/blog\/wp-content\/uploads\/2026\/07\/lw-x2.jpg"},"sameAs":["https:\/\/www.lukaswojcik.com\/blog"],"url":"https:\/\/www.lukaswojcik.com\/blog\/author\/luky\/"}]}},"_links":{"self":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/posts\/10362","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/comments?post=10362"}],"version-history":[{"count":3,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/posts\/10362\/revisions"}],"predecessor-version":[{"id":14999,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/posts\/10362\/revisions\/14999"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/media\/15155"}],"wp:attachment":[{"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/media?parent=10362"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/categories?post=10362"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lukaswojcik.com\/blog\/wp-json\/wp\/v2\/tags?post=10362"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}