IT & Networking

network & infrastructure

I designed and maintain a segmented Ubiquiti UniFi environment supporting home automation, self-hosted services, security cameras, remote access, media systems, development infrastructure, and more than 100 smart-home devices.

Ubiquiti UniFi network rack with managed switches, patch panel, gateway, and connected Ethernet cabling
Dual WAN Broadband with cellular failover
UniFi Gateway Routing, security, and management
Segmented Clients Trusted, IoT, guest, and camera traffic
Local Services Automation, DNS, monitoring, and media
Infrastructure Managed PoE switching and Wi-Fi 7
Secure Access Encrypted administration and monitoring
100+ Smart-home devices
Dual WAN Automatic failover
Wi-Fi 7 Managed wireless coverage
IPv4 + IPv6 Dual-stack networking

Overview

Built for reliable local operation.

The environment supports home automation, self-hosted services, security cameras, remote access, media systems, and development infrastructure. It is designed around security, reliability, redundancy, and local-first operation.

I maintain the network as an active production environment, handling configuration, monitoring, troubleshooting, updates, service availability, device onboarding, and ongoing improvements.

This public overview intentionally omits network addresses, device identities, credentials, and detailed access configuration.

Infrastructure

Managed from edge to endpoint.

Core infrastructure

  • Ubiquiti UniFi ecosystem
  • Gateway and security appliance
  • Managed PoE switching
  • Wi-Fi 7 access points
  • Centralized management
  • Network monitoring and analytics

Network architecture

  • VLAN-based segmentation
  • Trusted devices isolated from IoT equipment
  • Dedicated infrastructure management network
  • Separate guest access
  • IPv4 and IPv6 support
  • Controlled mDNS discovery where required

Internet connectivity

  • Dual-WAN configuration
  • Primary high-speed broadband
  • Secondary cellular connection
  • Automatic failover for improved uptime

Self-hosted services

  • Home automation platform
  • DNS filtering and ad blocking
  • Remote access services
  • Monitoring and automation systems
  • Local smart-home integrations
  • Secure remote administration

Security

Segmented, monitored, and maintained.

Security practices

  • Firewall-controlled communication between segments
  • Principle of least privilege
  • Device and service isolation
  • Encrypted remote access
  • Multi-factor authentication
  • Continuous monitoring and maintenance
  • Regular reviews and hardening

Operational responsibilities

  • Connectivity and performance troubleshooting
  • Firewall and segmentation policy management
  • Hardware, software, and firmware maintenance
  • Service monitoring and incident response
  • Secure device onboarding and lifecycle management

Technologies

Platforms and protocols.