Posts

Architecting a Resilient, Zero-Trust Security SOC & Automation Stack on Legacy Hardware (Dell OptiPlex 3020 Micro)

Image
​🏛️ CASE STUDY: The Lean Enterprise Micro-Datacenter ​1. Executive Summary ​This case study documents the design and deployment of a full-stack Infrastructure and Security Operations Center (SOC) on a resource-constrained Dell OptiPlex 3020 Micro (i3 CPU) . By leveraging LXC containerization, custom Python middleware, and Infrastructure as Code (IaC) , the project achieves enterprise-grade observability and zero-data-loss resilience while maintaining a remarkably low resource footprint (~10.5% average CPU usage). ​2. The Infrastructure Profile (The Constraints) ​ Hardware: Dell OptiPlex 3020 Micro (Intel Core i3, 16GB RAM, 500GB SSD). ​ Networking: MikroTik hEX r3 (Backbone). ​ Hypervisor: Proxmox VE 8.x. ​ Objective: Host 10+ critical services (Wazuh SIEM, n8n Orchestration, Zabbix Monitoring, Home Assistant, and custom AI UI) on a dual-core platform without compromising stability. ​3. The Logical Architecture (Sapper-Ranger Design) ​A. Network & Perime...

Bridging SWOT Analysis and Furikaeri (KPT)

Image
  The Strategic Architect: Bridging SWOT Analysis and Furikaeri (KPT) In the field of Technology Infrastructure, professionals are often divided into two camps: the Strategic Planners focused on high-level mapping, and the Operational Engineers focused on day-to-day execution. Many argue for a "keep it simple" approach, but in engineering, a simple plan lacking depth often results in significant Technical Debt. To build truly resilient systems, we must recognize that SWOT Analysis and Furikaeri (KPT) are not competing methodologies. They are two halves of the same coin—a unified feedback loop for Operational Excellence. 🏛️ SWOT Analysis: Pre-Deployment Intelligence SWOT (Strengths, Weaknesses, Opportunities, Threats) is far more than a corporate boardroom exercise. In an infrastructure context, it serves as a Strategic Audit before a single command is executed. Strengths & Weaknesses (Internal): This is the internal audit of the current stack. It’s about being hone...

Implementing a professional QoS configuration on MikroTik RouterOS v7

Image
Complete Guide to MikroTik QoS Configuration for RouterOS 7: Dual ISP Load Balancing & Advanced Traffic Shaping Published: March 20, 2026 Are you struggling with network congestion? Do you want to prioritize critical traffic on your MikroTik router? In this comprehensive guide, I'll walk you through implementing a professional-grade Quality of Service (QoS) configuration on MikroTik RouterOS 7 with dual ISP load balancing. What is QoS and Why Do You Need It? Quality of Service (QoS) is a networking technology that allows you to manage bandwidth allocation and prioritize traffic based on your business needs. Without QoS, all traffic is treated equally, which can cause: Slow internet during peak hours Lag in online gaming and video conferencing VoIP call quality issues Unfair bandwidth distribution among users With proper QoS implementation, you can ensure that critical applications (like VoIP and video calls) always have sufficient bandwidth while non-critical traff...

The Body's Internal Compass: How I Eat My Way Back to Life

Image
The Body's Internal Compass: How I Eat My Way Back to Life ​There is a very specific "vibe shift" that happens when you’re getting over a cold. It’s that moment when you move from just surviving the day to actually wanting to live it. For me, that transition is marked by a change in my cravings. I’ve realized that my body uses Chinese food as a medic and Japanese food as a bodyguard. ​The "Survival Vibe": Heavy-Duty Chinese Recovery ​When I’m at my worst—nose red, eyes watery, and feeling like my bones are made of lead—my body doesn't want "light." It wants density and heat . ​There is an incredible feeling when you take that first spoonful of steaming Congee . It’s not just the taste; it’s the way the heat travels down your chest. You can almost feel the ginger "waking up" your blood flow. When you’re sick, your body feels cold and "stagnant," like a car that won't start in the winter. That Chinese ginger-g...

Why One DHCP Server Is Better Than Many

Image
  Why One DHCP Server Is Better Than Many (Real Network Lessons) Back when I was managing networks for a small ISP and a hospital, we had two separate DHCP servers : one for internet clients, and another for hospital/internal systems (HIMS). On paper, it seemed clean — different networks, different scopes. In reality? It was a maintenance nightmare . 😅 The Problem: Multiple DHCPs = More Trouble Running multiple DHCP servers in the same environment can create: IP conflicts – overlapping ranges can cause devices to fight over addresses. Routing confusion – packets might get lost between networks that don’t talk cleanly. Harder maintenance – every change has to be repeated in multiple scopes. Troubleshooting nightmares – one DHCP gives errors, another works fine… good luck figuring out which. I suggested a unified DHCP approach 10 years ago , but it wasn’t implemented back then. Fast forward a decade… and they finally did it. Imagine the frustration of seeing ...

I always fail to learn

Image
 I always fail to learn Minsan ko na ring pinilit kuhanin ang approval ng mundo wala eh lagi lang ako ngmumukhang kalaban kahit na nag iisip tayo ng ikagaganda ng kung anuman eto may proyekto, trabaho, katrabaho. Ang mahalaga nandito ang pamilyang binubuo ko healthy sila ang Poong maykapal na lang ang bahala sa mga duda. I always wish everybody well, saka ano naman ang makukuha ko pag nadapa sila mas maganda panalo tayo lahat. I always ask questions(yes even dumb ones), I'm slow at picking things up, as kobe bryant always once said be a kid always learn from everybody.  Pero maybe I was asking the wrong questions, or maybe the wrong people. Pero what I really want is to collaborate dahil napakaliit lang ng mundo ano ba naman yung magtulungan tayo diba. I never wanted to lead I just want to guide. Marami ng leader 😉 pero a few people guides 😊.  Mahirap pero tinatry ko talaga sagutin ang lahat ng nagtatanong sakin kasi alam ko ang pakiramdam ng walang alam. I ...

MikroTik rsc File

Image
Mastering the MikroTik .rsc File: Your Guide to Portable Configurations If you’ve ever managed a MikroTik router, you’ve likely encountered two types of "backup" files: the standard .backup and the flexible .rsc . While the binary backup is great for a quick "undo" button, the .rsc (RouterOS Script) file is the true secret weapon for network administrators. In this post, we’ll dive into what an .rsc file is, why it’s superior for migrations, and how to use it like a pro.      What exactly is a .rsc file? Unlike a standard system backup, an .rsc file is a plain-text script . It contains the exact CLI (Command Line Interface) commands required to rebuild your router’s configuration from scratch. Think of it this way: A .backup file is a "snapshot" of the router's entire brain. An .rsc file is a "recipe" that tells the router how to cook the configuration. Why use .rsc instead of .backup? Most beginners rely on /system backup , but experien...