Engineering Projects & Systems Architecture on Brandon Extra | Security & Systems Architecture https://brandonextra.com/projects/ Recent content in Engineering Projects & Systems Architecture on Brandon Extra | Security & Systems Architecture Hugo en-us Wed, 30 Sep 2026 00:00:00 +0000 Production Multi-VLAN Network Segmentation & Threat Isolation https://brandonextra.com/projects/enterprise-vlan-segmentation/ Wed, 30 Sep 2026 00:00:00 +0000 https://brandonextra.com/projects/enterprise-vlan-segmentation/ Design and deployment of an enterprise 6-VLAN network topology utilizing virtualized OPNsense, Zenarmor DPI, and default-deny inter-VLAN filtering. Two-Tier Disaster Recovery & Hardened Container Orchestration https://brandonextra.com/projects/tier2-disaster-recovery/ Wed, 30 Sep 2026 00:00:00 +0000 https://brandonextra.com/projects/tier2-disaster-recovery/ Zero-plaintext container deployments paired with a two-tier backup pipeline utilizing local block snapshots and client-side encrypted Backblaze B2 offsite syncs. Hybrid Cloud Perimeter: VPS Reverse-Proxy Shield & Zero-Trust ZTNA https://brandonextra.com/projects/hybrid-cloud-edge-defense/ Wed, 30 Sep 2026 00:00:00 +0000 https://brandonextra.com/projects/hybrid-cloud-edge-defense/ Architecting an obfuscated edge perimeter using a stateless OVHcloud VPS, Caddy Layer 4 filtering, MaxMind GeoIP gating, and a kernel-level WireGuard transit pipe. NOC/SOC Defense: Packet Analysis, Threat Bouncing, and SIEM Telemetry https://brandonextra.com/projects/soc-telemetry-packet-analysis/ Wed, 30 Sep 2026 00:00:00 +0000 https://brandonextra.com/projects/soc-telemetry-packet-analysis/ Implementing a hybrid CrowdSec IPS and log analysis pipeline across edge proxies and hypervisors to detect, analyze, and drop malicious traffic flows.