Specializing in bare-metal hardware deployments, Layer 1-7 network topologies, storage array engineering, and physical infrastructure installation.
Architected a bare-metal edge gateway that physically isolates routing planes to eliminate backplane contention. Terminated direct WAN ingress and internal VLAN routing on a dedicated Intel I226-V adapter, while dedicating a Mellanox ConnectX-3 Pro dual-port SFP+ interface strictly to the 10G distribution uplink and Wi-Fi 7 mesh backhaul.
Engineered bare-metal edge compute nodes utilizing strict PCIe device passthrough. Abstracted and dedicated x16 direct CPU lanes and raw GPU resources directly to localized container environments to isolate and accelerate independent AI worker nodes and hardware transcoding pipelines.
Integrated PiKVM endpoints linked directly to isolated 1G copper downlinks on the MikroTik distribution layer. This provides secure, hardware-level KVM-over-IP access for remote bare-metal recovery and pre-boot BIOS diagnostics.
Architected a multi-tier switching fabric utilizing MikroTik CRS305 and CRS310 distribution switches. Interconnected the firewall LAN and hypervisor environments via SFP+ Direct Attach Copper (DAC). Enforced a strict global MTU of 1500 across all physical and virtual interfaces to guarantee zero packet fragmentation at the edge.
Terminated residential coaxial head-ends utilizing Amphenol 2-way digital splitters and PPC Point-of-Entry (POE) filters to prevent RF frequency leakage to the ISP. Deployed ScreenBeam ECB7250 MoCA 2.5 adapters to bridge a Tri-Band Wi-Fi 7 mesh directly to the dedicated wired backbone.
Abstracted physical media into highly available, specialized pools. OPNsense and Proxmox host operating systems are secured via discrete ZFS NVMe and SATA boot mirrors. Local hypervisor mass storage is handled by a 4-disk Seagate ZFS array. On the Synology NAS, bulk data rests on a high-capacity Btrfs array, while Docker containers execute on a dedicated flash-native Btrfs volume spanning dual HP EX920 NVMe drives.
Engineered a 2-1 staggered cross-network recovery topology over the 2.5G backbone. A dedicated Proxmox Backup Server (PBS) LXC utilizes native VZDump APIs to execute atomic ZFS block-level snapshots of all core hypervisor containers. This pipeline enforces brief I/O freezes to guarantee strict database crash-consistency before pushing delta-deduplicated chunks to the datastore.
Remote NAS data volumes and Docker containers are indexed and protected via a headless Dockerized Proxmox Backup Client. To prevent mid-transaction lock corruption and ensure schema integrity, custom cron wrappers trigger application-consistent `pg_dumpall` operations inside active PostgreSQL containers (e.g., Immich) immediately prior to the scheduled PBS filesystem crawls.