Azure Secure Network Architecture
A conceptual workload-separation design using VNets, subnets, NSGs, identity and logging.
Example project — replace with your own implementation
ROUTE ESTABLISHED
Network security.
Infrastructure clarity.
I work across network security, infrastructure and cloud environments, with a focus on building systems that are understandable, maintainable and defensible.
droppedPackets()● operational
networksecuritycloudoperations
- mode
- static-first
- identity
- pseudonymous
- background
- packet rain
01 / FEATURED PROJECTS
Featured projects
Multi-VLAN Enterprise Network Lab
A documented lab outline covering segmentation, trunks, inter-VLAN routing, DHCP and validation.
Example project — replace with your own implementation
Palo Alto NGFW Segmentation Lab
A safe project scaffold for zones, policy, NAT, logging and threat prevention.
Example project — replace with your own implementation
02 / HOMELAB
Homelab architecture and lessons
Published architecture will preserve design decisions while omitting identifiers and operational detail. The current page is intentionally a placeholder.
View the sanitised approach →SITE ANGFW-A10.10.0.0/16
IKEv2IPSEC / ESPENCRYPTED
SITE BNGFW-B10.20.0.0/16
CONCEPTUAL SITE-TO-SITE TUNNEL · EXAMPLE ADDRESSES
03 / LATEST NOTES
Field notes
Azure Network Security Notes
A learning template for controls, identity, logging, open questions and validation.
NAT Mental Model
A compact placeholder for documenting pre-NAT and post-NAT reasoning without invented commands.
OSPF Troubleshooting Notes
An editable symptoms-to-checks troubleshooting note template.
04 / CURRENT FOCUS
Current work and study notes
Current learning and build details are left as editable placeholders until there is real work to publish.