Projects Showcase
An interactive collection of personal engineering builds, self-hosted controllers, network security tools, and open-source contributions.
Enterprise Multi-VLAN, Kea DHCP & BIND 9 DNS
Designed and deployed a 5-VLAN network segmentation architecture (Management, Family, IoT, Voice, Guest). Integrated OPNsense sub-interfaces with DHCP Relay, centralized Kea DHCP IP pools, BIND 9 DNS recursive resolution, and automated dynamic reverse PTR updates.
Enterprise BIND 9 RPZ Ad & Tracker Blocker
Engineered an enterprise-grade, network-wide DNS ad and tracker suppression engine utilizing BIND 9 Response Policy Zones (RPZ). Automatically compiles 95,000+ curated ad/malware signatures into binary master zones with RFC-compliant NXDOMAIN drops, custom whitelists, and weekly automation.
Interactive Subnet & VLSM Calculator
High-precision browser utility designed for network engineers. Features real-time IPv4 network calculations with 32-bit binary bit breakdown, Variable Length Subnet Masking (VLSM) allocation engine, and IPv6 address compression/expansion analysis.
flexiManage Controller (Modernized Fork)
Modernized, self-hosted fork of flexiWAN's flexiManage SD-WAN central controller backend and UI. Upgraded runtime compatibility for Node.js v22/v24, refactored Mongoose BSON schema handlers, integrated a modern Vite + React frontend dashboard, and configured automated Docker deployment pipelines.
Enterprise Network Infrastructure Migration
Complete network infrastructure migration from Layer 3 switches with EIGRP/OSPF to an OPNsense firewall gateway. Eliminated routing loops, implemented 6-VLAN security isolation (IoT, Guest, Family, Management), and achieved seamless cutover with under 30 seconds of total downtime.
OPNsense Cloudflare SSL Automation
Automated wildcard SSL certificate management (*.ruhigita.com) on OPNsense using Cloudflare API integration with ACME DNS-01 challenge validation. Fine-tuned FreeBSD kernel parameters to achieve 738 Mbit/s network throughput.
Python Security Scanner Suite
Python-based automated security assessment scanner integrating Nmap, Nikto, and Gobuster. Identifies open network ports, outdated software services, hidden web directories, and server load-balancing configurations.
GitLab CE Enterprise Deployment Guide
Step-by-step production deployment guide for installing and hardening GitLab Community Edition on Ubuntu Server 24.04 LTS. Covers firewall setup, external URL SSL configuration, runner registration, and backup routines.
Home Network & IP Camera Infrastructure
Designed and implemented a secure home network infrastructure featuring integrated IP camera surveillance. Configured automated VM provisioning using Ansible and cloud-init with VLAN isolation for IoT devices.
DOTNET & Postgres Data Analytics App
Served as team lead and backend developer for a data analytics platform built with C# .NET and PostgreSQL. Automated server configuration and HAProxy load balancing via Ansible scripts to ensure high availability.
Proxmox VE HomeLab Infrastructure
Built an enterprise-grade virtualized home lab environment powered by Proxmox VE. Hosts containerized services on Docker, 3 managed switches, 2 routers, and proxy servers for real-world network testing.