Projects

Selected work

Network architecture: two AWS regions, two transit gateways, two site-to-site VPNs to an on-premises Palo Alto firewall

Final project · Bar-Ilan University · 2026

Four AWS accounts behind an on-premises Palo Alto firewall

A 97-step build on AWS, documented, then rebuilt in a second region and failed over in under two minutes.

97documented steps
2regions, one firewall in the middle
83sfor DNS to move the origin in the failover

Read the write-up

Open the 422-page guide, all 97 steps as they were built

The site open in a laptop browser and on a phone beside it, the same page at both sizes.

Ongoing · 2026

One application, two clouds, two architectures

The app on this site, deployed twice under opposite constraints: on AWS behind an on-premises Palo Alto firewall for the final project, then rebuilt as a single hardened host on Oracle Cloud once the job changed from proving an architecture to running a site.

The operations dashboard open in a laptop browser and on a phone beside it, the check summary and the service tiles.

Ongoing · 2026

A private operations dashboard

A dashboard built for one operator, to see what the live site is actually doing rather than what its configuration says it should.

Open WebUI on a laptop and on a phone, the local Qwen model answering how a Cloudflare Tunnel reaches a home server without opening an inbound port.

Homelab · 2026

Local language models, reachable from anywhere

Ollama and Open WebUI in two containers on WSL2 with GPU passthrough, running Phi-3 Mini and a 9B Qwen sized to the hardware I have, reached from outside over a tunnel behind an identity check.

The n8n editor on a laptop and on a phone, a site health check workflow from its two triggers through the check to a healthy path and a recheck before any alert.

Homelab · 2026

An automation server, and the access policy that wasn't

n8n in Docker on Ubuntu under VMware with a tunnel container beside it: the control interface behind an identity check, the webhook endpoint deliberately left open, because a webhook that needs a human to log in is not a webhook.

2021 - 2025

XP.NETWORK - infrastructure, accounts and operations

The infrastructure, every account and the operations of a multi-chain NFT bridge startup: 30+ blockchains, close to $6M raised, four years from 2021 to the wind-down in 2025.

2020 - 2021

Live TV fundraising payment infrastructure

The payment and data pipeline behind nationally televised fundraising campaigns for Krembo Wings, Latet and Variety: donations in real time, at broadcast volume.

Payments
Real-time
DNS

2020

WordPress Vulnerability Scanner

A free scanning tool that flagged security and SEO issues on live WordPress sites.