The Problem: The Oracle Cloud Infrastructure (OCI) free-tier offers highly capable Ampere ARM Compute shapes, but availability is restricted because other accounts claim instances automatically inside resource pools.

The Solution: Built a programmatic automation engine in Python that regularly interrogates OCI APIs, executing backoff algorithms and handling continuous requests securely without resource exhaustion or key compromise.

Developed a low-latency network flow categorization model using XGBoost that operates over massive, raw network metrics arrays to flag suspicious transactions at speed.

Technical Execution: Trained and benchmarked on the benchmark CICIDS2017 intrusion dataset, engineering key traffic features (Packet size variance, Flow Inter-Arrival times) to isolate infiltration patterns without suffering statistical biases.

A comprehensive local private network environment built over low-footprint headless host systems, optimizing RAM and storage allocations while locking access pathways.

Secure Perimeter: All DNS lookup requests are resolved securely through isolated Pi-hole Docker containers blocklisting active telemetry networks. System administration access pathways require multi-factor encrypted authentication routed strictly via a private Tailscale subnet.

This project focuses on the academic study of network protocols, boundary conditions, and ISP limit structures. By tracing how network layers determine and tag cellular hotspot transactions, we isolate policy boundaries.

Scientific Methodology: Monitored routing headers using Wireshark, validating how specific header signatures (such as TTL manipulation or distinct user-agent signatures) communicate routing rules back to service centers.

This blueprint specifies a segmented network design for modern business operations. It prioritizes perimeter security, traffic separation, and rapid packet delivery over multiple subnets.

Network Architecture Highlights:

• Logical separation using dedicated VLAN matrices.
• High availability design with redundant load balancers and core switches.
• Dedicated intrusion prevention zones for critical data vaults.

A custom auditing utility built to programmatically parse configurations against key control standards, outputting immediate compliance ratings.

This system bridges technical deployment details with executive security reporting, ensuring critical security benchmarks (like password complexity, port exposures, and identity storage mechanisms) match target governance frameworks.