Office-to-DC networking
Site-to-site IPSec, backup links, internet bill down by about two thirds
What was built
Several offices and two data centers, each living on its own. I pulled them into one managed perimeter over site-to-site IPSec. Links to the data centers I rebuilt on MikroTik and OpenVPN, and moved some hardware. The internet bill dropped by roughly two thirds.
Stack
MikroTikUbiquitiTP-LinkIPSecOpenVPNVLAN
Other work
- Single source of truth for infrastructure
- 2FA / SSO for mail on Keycloak + ANGIE
- Enterprise infrastructure from scratch
- Managed corporate access client
- Internal certificate authority with ACME
- Report access gateway on directory groups
- Workplace self-service: software and VDI
- Active Directory hygiene: GPO repair
- Active Directory modernization
- Zabbix + Grafana and automation
- Virtualization and vCenter
- Distributed Veeam and DRP
- Infrastructure Q&A agent over MCP
- Multi-agent workflow for solo development
- LLM call analysis and BI/CRM pipeline