network-segmentation

Least squares adjustment software

Zero-trust cloud architecture diagrams and modernization framework visuals for regulated cloud environments.

Azure DevOps Server development system segmentation best practices

Produces a set of network policies, given a json describing the connectivity in a given cluster

Kubernetes operator: auto-generate NetworkPolicy from traffic patterns (learning/enforcing modes)

A virtualized multi-zone secure network built with pfSense, featuring firewall rule enforcement across WAN/LAN/DMZ segments, DNS-based content filtering via pfBlockerNG, and real-time intrusion detection with Snort. Attack simulations were conducted using Kali Linux and Metasploitable to validate the layered defense architecture.

Describe your OT zones → get a deny-by-default segmentation policy as real Palo Alto / FortiGate / Juniper / iptables / Cisco ASA rules. IEC 62443 + Purdue, import your inventory, export diagram & policy doc. Runs in your browser.

AXIOM Mesh 0.12.0-dev.3: local-first, fail-closed coordination kernel with zero-dependency setup, authenticated Gateway contracts, cryptographic evidence, and an experimental loopback AXIOM One PWA for governed owner memory and bounded provenance links. No live deployment or production promotion claimed.

Terraform-based Azure network infrastructure lab with segmented subnets, NSGs, Windows Server VMs and a Wazuh-ready Ubuntu security VM.

Enterprise network segmentation, OPNsense firewall rules, VLAN management, and MITM (ARP Spoofing) attack/defense lab case study

A Vulnerable Active Directory lab built to demonstrate enterprise misconfigurations, attack paths, network segmentation and penetration testing techniques.

A simulated enterprise network demonstrating VLAN segmentation, inter-VLAN routing, and DHCP services using Cisco Packet Tracer.

Least squares adjustment software

Secure AWS VPC architecture featuring public/private subnet segmentation, IAM least-privilege access, hardened EC2 deployment, and monitoring with CloudWatch and VPC Flow Logs

Zero-Trust Platform: A comprehensive security platform enforcing zero-trust principles for access control, network segmentation, and threat detection across hybrid environments.

Purple team-focused enterprise network security lab — built, attacked, defended, and continuously hardened as a long-term hands-on portfolio project.

Educational PoC demonstrating network isolation for Node.js apps using Docker internal networks and nginx as an egress proxy gateway.

OT/ICS cyber range for hands-on substation network segmentation training. Real DPI firewall (containd), 7 labs aligned to the DefendICS workshop, runs on a single laptop.

Refonte complète d'infrastructure HomeLab : migration VLAN, sécurité, matériel occasion ≤1000€. Inspiré du projet iMot3k.

Layer 3 campus network in GNS3: VLAN segmentation (IT/HR/Guest/DMZ), ACL least-privilege, FortiGate Active–Passive HA with measured ~1s failover and session preservation, HSRP redundancy. Extending to multi-site OSPF + IPsec VPN.