autonomous intrusion defense, flow telemetry, and hardened homelab infrastructure
A self-hosted homelab designed with enterprise defense-in-depth principles: zero-trust edge ingress, behavioral intrusion prevention, automated threat blocking, and encrypted internal transit.
Perimeter Defense & DNS Privacy
Authoritative local DHCP & recursive caching DNS engine enforcing the HaGeZi Pro threat blocklist to drop malware, tracking, and telemetry queries at the gateway.
Intrusion Prevention & Threat Intel
Behavioral detection engine analyzing ingress application and transport logs. Automatically synchronizes with the CrowdSec community consensus to preemptively blacklist rogue IP subnets.
C2 Beaconing & Heuristic Detection
Monitors egress traffic for suspicious C2 (command & control) beacons, known malicious domain queries, and anomalous outbound port requests.
Layer 2–7 Flow Telemetry
High-speed packet capture and flow telemetry analyzer inspecting bandwidth saturation, protocol compliance, and host behavioral anomalies across the internal network.
Click or hover any node to inspect traffic flow, security inspection layers, and protocols.
Cloudflare Tunnel + Caddy TLS
Public WAN ingress is proxied through an encrypted Cloudflare tunnel directly into Caddy. No public ports are opened on the physical edge router.
Perimeter Defense & DNS Privacy
Authoritative local DHCP & recursive caching DNS engine enforcing the HaGeZi Pro threat blocklist to drop malware, tracking, and telemetry queries at the gateway.
Intrusion Prevention & Threat Intel
Behavioral detection engine analyzing ingress application and transport logs. Automatically synchronizes with the CrowdSec community consensus to preemptively blacklist rogue IP subnets.
C2 Beaconing & Heuristic Detection
Monitors egress traffic for suspicious C2 (command & control) beacons, known malicious domain queries, and anomalous outbound port requests.
Layer 2–7 Flow Telemetry
High-speed packet capture and flow telemetry analyzer inspecting bandwidth saturation, protocol compliance, and host behavioral anomalies across the internal network.
official certification transcripts verified through CompTIA CertMetrics
"Welcome, Moon-and-Star, to this place where destiny is made."
Dagoth Ur · Red Mountain