From Pets to Cattle: Reference Architecture for SMB Server Rooms in 2026
The canonical 2026 SMB server-room blueprint: Proxmox cluster, IaC-defined hosts, immutable golden images, automated patching, and a rebuild procedure anyone in the team can execute in under 90 minutes. Migration path from pets to cattle in 9 months.
The European SMB Network Stack in 2026: What Actually Works
The 2026 reference network stack for a 50-300 seat EU SMB — firewall, switching, wireless, ZTNA, identity, endpoint, EDR, observability, backup, compute — with per-layer reasoning across 23 production deployments. Compliance-aware, budget-aware, operational-team-aware.
VLAN Design Patterns for Multi-Tenant Office Buildings
VLAN design patterns for shared-office buildings with 3-15 tenants. Trunk topologies, VRF-per-tenant, DHCP scoping, captive portals, QoS for shared uplinks, and the GDPR addenda that lease templates do not yet include.
Site-to-Site VPN vs SD-WAN: Picking the Right Backbone for Multi-Office Operations
IPsec, WireGuard mesh, and SD-WAN compared against three real multi-office deployments. Decision matrix scoring throughput, latency, failover behaviour, operational complexity, vendor lock-in, and 5-year TCO from €13k to €265k.
Site-to-Site VPN Architecture: WireGuard vs IPSec in Production
WireGuard vs IPsec measured side-by-side over 4 years in production. Throughput, latency, failover, operational complexity, key management. The hybrid pattern (IPsec backbone + WireGuard overlay) that consistently produces the best outcomes.
Zero-Trust Network Segmentation Without the Enterprise Price Tag
Zero-Trust at €5k of CAPEX. VLAN segmentation, 802.1X with RADIUS, ZTNA overlay (Tailscale / Twingate / Cloudflare), host-level nftables, monthly policy review. 80-85% of enterprise micro-segmentation value for under 5% of the cost.