Services

Services

Consulting on open-source infrastructure — from architecture and rollout to day-to-day operations.

I take on both scoped engagements and ongoing operational responsibility — from a single IPv6 rollout to full architecture and operations for a company’s infrastructure. Get in touch for a no-obligation chat about your project.

Linux & BSD operations

Design, hardening and operation of server infrastructure across distributions.

  • Debian, Ubuntu, RedHat/Fedora, Novell/OpenSUSE, Mandriva
  • OpenBSD and FreeBSD
  • Migration and reinstallation in virtualized environments

Infrastructure-as-Code & DevSecOps

Everything defined as code, version-controlled and tested — so environments never drift from their intended state.

  • Ansible-driven configuration management, from bare metal to Kubernetes (plus Puppet, where it fits)
  • Git as the single source of truth — no manual changes in production
  • GitOps and CI/CD-driven deployment
  • Security and compliance built into the pipeline (DevSecOps)

Networking, IPv6 & BGP

Planning, rollout and operation of networks — from local LAN to peering with external networks.

  • Cisco and Ubiquiti (Unifi)
  • IPv6 planning, operations and rollout, incl. Provider Independent ranges
  • BGP and OSPF peering, multi-homing
  • VLAN, 802.1x, DNS and DNSSEC

Virtualization & Kubernetes

From a single hypervisor to multi-datacenter Kubernetes clusters.

  • KVM, VMware ESXi, Microsoft Hyper-V, Citrix XEN
  • On-prem and hybrid Kubernetes (k8s), incl. Azure
  • Microservices with Docker and on-prem GitLab CI/CD

Security & firewalling

Hardening, access control and secure network traffic.

  • iptables and PF, VPN, Fail2Ban
  • FreeRADIUS and Kerberos
  • Penetration testing and security reviews
  • DKIM, SPF and DMARC for mail security

Process automation

Automating business processes to reduce manual work.

  • RPA with UiPath (development, scoping, HA installations)
  • Microsoft Power Automation

Mail & communication

Reliable mail and communication systems.

  • Postfix, IMAP/POP3, SMTP
  • Spam and virus mitigation
  • IP telephony with Asterisk and FreePBX

Monitoring & 24/7 operations

Visibility into your infrastructure and reliable production operations.

  • Prometheus for service metrics and autoscaling
  • Nagios and DataDog for availability and performance monitoring
  • Ownership of reliable 24/7 operations

Advisory & architecture

Sparring on architecture, scoping and in-sourcing of IT functions.

  • IT architecture and project management
  • In-sourcing of IT functions
  • Agile and DevOps processes

Reach out if you have a project, an operational challenge, or just want to talk infrastructure.