Proxmox VE HA Cluster
- Building a highly available (HA) cluster based on Proxmox VE
- Three-node cluster with HBA-based multipath management on redundant FC storage
- Ensuring system continuity and minimizing service interruptions
Projects
Projects are listed with their client or employer context; confidential infrastructure details are not shared.
Virtualization
Central Management (Proxmox Datacenter Manager)
- Managing the entire server infrastructure from a central management platform
- Improving operational efficiency and observability
Proxmox (KVM) Cluster HA + Ceph
- Proxmox cluster with a Ceph-based distributed storage infrastructure
- Designing and commissioning a highly available virtualization platform
- Improving data integrity and system resilience
- Built on three HPC nodes and one InfiniBand switch
VMware vCenter Cluster (HA & DRS) Setup and Optimization
- Enabling HA and DRS features
- Automatic load balancing and high availability for virtual machines
- Improving system performance and continuity
Migration from Physical Servers to a KVM Virtualization Platform
- Moving physical server infrastructure to a Proxmox (KVM) platform
- Optimizing resource usage through server consolidation
- Improving backup and business continuity processes
Proxmox Virtualization and Disaster Recovery Migration
- Migrating the existing infrastructure to a Proxmox (KVM) platform
- Designing and implementing disaster recovery scenarios
- System continuity and high availability
KVM Virtualization and HA Cluster Migration
- Migration from XenServer to a KVM (Proxmox) cluster HA architecture
- High availability and performance optimization
VMware ESXi → Proxmox Migration
- Moving the existing VMware infrastructure to the Proxmox (KVM) platform
- System continuity and cost optimization
Network & Infrastructure
Network Topology Transformation (Ring → Star)
- Converting the ring topology to a star architecture
- Improving network performance, manageability and fault tolerance
pfSense Firewall and Network Security
- VPN, NAT and DMZ configurations
- Network segmentation and security policies
- Secure communication between the corporate network and external access
Network Infrastructure and Star Topology Transformation
- Redesigning the local network infrastructure
- Migration from ring to star topology
- Network segmentation with VLANs
Data Center and Disaster Recovery Center Design
- Planning and implementing the DC and DR infrastructure
802.1X Network Authentication (PacketFence)
- Building an 802.1X authentication infrastructure for network access control
GLP Data Security and Authorization
- Implementing data encryption and authorization on file servers
- Passing international GLP audits three years in a row
Network Infrastructure and Star Topology Transformation
- Redesigning the corporate network with multi-vendor hardware
- Migration from ring to star topology
- Building the VLAN and segmentation structure
Active Directory Configuration
- Planning and commissioning the PDC and ADC architecture
- Building the corporate identity management infrastructure
SAP Production MII Firewall over Proxy
- Designing and commissioning a secure firewall-over-proxy architecture for SAP MII production systems
Failover Proxy Server
- Building and configuring a highly available proxy infrastructure
- VPN and reverse-proxy architecture with DR failover
System and Network Infrastructure + Active Directory Forest Trust
- Building the corporate network and system infrastructure
- Active Directory Forest Trust configuration in a multi-domain setup
Linux & Open Source
Linux LAMP Infrastructure (CRM and Web Systems)
- Building a LAMP infrastructure for in-house CRM and web applications
- Performance- and security-focused configuration; continuity and maintenance
Nextcloud Setup and Administration
- Designing and commissioning an in-house file sharing and cloud system
DHCP Migration (Microsoft DHCP → ISC Kea)
- Moving the DHCP infrastructure to an open-source solution
- Improving performance and manageability
Open-Source Systems Deployment
- Deploying OpenProject, Open-AudIT, Zabbix, Squid, WordPress and WSUS
IoT / OT & Monitoring
IoT Data Collection and Automation (Shopfloor Integration)
- Collecting data from IoT devices over SMB (SMBv1/SMBv3)
- Designing data processing on a Linux Container in an isolated network
- Automating data flow with Bash scripts and commissioning the shopfloor application
IoT Security and Network Segmentation
- Creating and applying firewall rules for the IoT network
- Isolated and secure network architecture with VLAN segmentation
- IoT infrastructure operating independently of the corporate network
IoT Data Archiving and Analysis
- Automatic transfer of image and production data to central storage systems
- Building and optimizing data analysis processes
IoT Monitoring and Analysis (Zabbix)
- Monitoring IoT devices with Zabbix
- Building performance- and event-based analysis processes
Central Data Collection and File Server Migration
- Moving production machine and traceability data to central file servers
- Improving data availability and analysis processes