Zero-Trust on Brandon Extra | Security & Systems Architecture https://brandonextra.com/tags/zero-trust/ Recent content in Zero-Trust on Brandon Extra | Security & Systems Architecture Hugo en-us Wed, 30 Sep 2026 00:00:00 +0000 Production Multi-VLAN Network Segmentation & Threat Isolation https://brandonextra.com/projects/enterprise-vlan-segmentation/ Wed, 30 Sep 2026 00:00:00 +0000 https://brandonextra.com/projects/enterprise-vlan-segmentation/ Design and deployment of an enterprise 6-VLAN network topology utilizing virtualized OPNsense, Zenarmor DPI, and default-deny inter-VLAN filtering. Hybrid Cloud Perimeter: VPS Reverse-Proxy Shield & Zero-Trust ZTNA https://brandonextra.com/projects/hybrid-cloud-edge-defense/ Wed, 30 Sep 2026 00:00:00 +0000 https://brandonextra.com/projects/hybrid-cloud-edge-defense/ Architecting an obfuscated edge perimeter using a stateless OVHcloud VPS, Caddy Layer 4 filtering, MaxMind GeoIP gating, and a kernel-level WireGuard transit pipe. Enterprise Multi-VLAN Network & Microsegmented Lab Architecture https://brandonextra.com/posts/homelab-architecture/ Wed, 30 Sep 2026 00:00:00 +0000 https://brandonextra.com/posts/homelab-architecture/ A production-grade homelab architecture implementing a 6-VLAN network schema, virtualized OPNsense Layer 7 inspection, and hardened storage fabrics.