███████╗██╗   ██╗███████╗██╗  ██╗ █████╗ ███╗   ██╗
 ██╔════╝██║   ██║██╔════╝██║  ██║██╔══██╗████╗  ██║
 ███████╗██║   ██║███████╗███████║███████║██╔██╗ ██║
 ╚════██║██║   ██║╚════██║██╔══██║██╔══██║██║╚██╗██║
 ███████║╚██████╔╝███████║██║  ██║██║  ██║██║ ╚████║
 ╚══════╝ ╚═════╝ ╚══════╝╚═╝  ╚═╝╚═╝  ╚═╝╚═╝  ╚═══╝

INFRASTRUCTURE ARCHITECT • SYSTEMS ADMINISTRATOR

Infrastructure Built to Scale. Security Built to Hold.

Network Admin  |  Systems Architect  |  Security-First Infrastructure

$ // Access Projects █

// WHOAMI

about.sh
$ cat /etc/about/sushan.conf
I'm Sushan, a Network & Systems Administrator with obsessive attention to production stability and security. I architect infrastructure from bare metal (HPE ProLiant, Dell PowerEdge) to cloud (AWS), manage enterprise security stacks (Sophos, FortiGate, F5 BIG-IP), and automate everything that moves. I speak: Active Directory, Proxmox, VMware ESXi, Linux, PowerShell, and infrastructure breakdowns at 2 AM.

# Core Mindset

"Infrastructure is only as good as its weakest link. I build redundancy, test failover, automate recovery."

# Homelab

"Dell R710 ESXi environment, Proxmox cluster with ZFS, self-hosted Vaultwarden, Odoo instances, and way too many VMs."

# Philosophy

"Production systems don't break — people don't plan. I plan obsessively."

// FEATURED PROJECTS

projects.sh
$ ls -lah /projects/infrastructure/
total 5 projects    drwxr-xr-x sushan infra 4096 Aug 08 15:21
● [ACTIVE_DIRECTORY_LAB]
├── Domain: dc01.saulgoodman.com
├── Infra: AWS EC2 (DC01 + DC02 replication)
├── Stack: Windows Server 2022, Kerberos auth flow, GPO deployment
├── Outcome: Production-ready two-DC lab, documented for Medium/LinkedIn
└── Status: OPERATIONAL ✓
● [VAULTWARDEN_MIGRATION]
├── Platform: vault.tejastech.com.np
├── Challenge: F5 BIG-IP SSL termination + Zoho SMTP routing issue
├── Resolution: Fixed config.json schema, upgraded to latest Vaultwarden, fixed cert chain
├── Result: 100% uptime, 0 cert errors, team migration complete
└── Status: HARDENED ✓
● [SOPHOS_CENTRAL_AUTOMATION]
├── Client: Mahalaxmi Bikas Bank Ltd.
├── Output: Multi-tier reporting (technical + management dashboards)
├── Tools: 9-file CSV/PDF export pipeline → Word document reports
├── Cadence: Recurring monthly reports across 3 reporting cycles
└── Status: AUTOMATED ✓
● [ESXI_INFRASTRUCTURE]
├── Hardware: Dell PowerEdge R710 (Westmere CPU)
├── OS: VMware ESXi 7.0 (ESXi 8 incompatible with R710)
├── Storage: vCenter management, snapshot optimization
├── Lab: Testing backup/DR with Acronis Cyber Protect
└── Status: OPTIMIZED ✓
● [BRANCH_CONNECTIVITY]
├── Platform: Odoo (odoo.trivenitrade.com)
├── Issue: Asymmetric routing + host-based filtering blocking traffic
├── Diagnosis: Traced packet loss to Ubuntu firewall + routing table
├── Fix: AD DNS workaround + iptables rules tuning
└── Status: RESOLVED ✓

// SYSTEM SPECIFICATIONS

⚙ HYPERVISORS & VIRTUALIZATION
Proxmox VE VMware ESXi KVM/libvirt QEMU vCenter EVC DRS
☁ CLOUD & INFRASTRUCTURE
AWS EC2 Proxmox API Infrastructure IaC PowerShell DSC Terraform
🔒 SECURITY & NETWORK
Sophos XG/XGS FortiGate F5 BIG-IP Active Directory Kerberos IPsec VPN DNS Hardening HSTS CSP Headers
🖥 SYSTEMS & OS
Ubuntu Server CentOS/RHEL Debian Windows Server 2022 PowerShell Bash systemd
🗄 DATABASES & STORAGE
PostgreSQL MySQL/MariaDB ZFS LVM NFS iSCSI RAID
🔄 BACKUP & DR
Acronis Cyber Protect Veeam Proxmox Backup Snapshots Failover Planning DR Runbooks
📡 MONITORING & AUTOMATION
Grafana Prometheus Zabbix Cron Jobs Ansible Python Scripting
🌐 WEB & APPLICATION SERVICES
Nginx Apache HAProxy Let's Encrypt Reverse Proxy Docker Docker Compose

// CURRENT LAB STATUS

systemctl status lab
$ systemctl status lab
● Lab Status: OPERATIONAL
├─ Proxmox Cluster: RUNNING
├─ Vaultwarden: UP (vault.tejastech.com.np)
├─ Odoo Instance: UP (internal)
├─ Active Directory Lab: UP (dc01.saulgoodman.com)
├─ Monitoring: RUNNING
└─ Uptime: 99.7%
// Last Update:

// TECHNICAL ARTICLES

recent-posts.txt
$ ls /blog/
recent-posts.txt:
📄

"Why ESXi 8 Fails on Westmere CPUs (And How I Discovered It)"

Hardware compatibility deep-dive — CPU instruction sets & VMware deprecation

esxi
📄

"Debugging F5 BIG-IP SSL Termination: A 4-Hour Troubleshooting Journey"

SSL cert chains, iRule debugging, and why Layer 7 routing matters

f5
📄

"Vaultwarden to Production: SSL Chains, SMTP Routing, and Config.json Hell"

Self-hosted password management with zero-trust deployment

vaultwarden
📄

"Active Directory Lab on AWS: Building Two-DC Replication from Scratch"

AD DS, DNS delegation, sites & services, Kerberos trust

active-directory

// SYSTEM LOGS — CHALLENGE ACCEPTED

/var/log/challenges.log
[2025-07-22 02:14:33] CRITICAL Vaultwarden SMTP stopped sending verification emails. Zoho relay rejecting outbound. Traced to config.json schema change in upstream update. Rebuilt SMTP config, tested relay, restored service. Downtime: 0 min (caught in monitoring).
[2025-06-15 03:47:10] WARNING F5 BIG-IP SSL termination presenting wrong cert to clients. Cert chain incomplete. Rebuilt chain from root CA → intermediate → leaf. Tested with openssl s_client. All endpoints verified.
[2025-05-08 01:22:55] CRITICAL Branch office lost connectivity to Odoo ERP. Asymmetric routing between two WAN links. Packet capture showed return traffic hitting wrong interface. Fixed with policy-based routing + iptables SNAT rules.
[2025-04-20 14:05:41] INFO ESXi 8.0 installer fails on Dell R710 — CPUID check rejects Westmere (lacks AES-NI on this stepping). Confirmed via VMware HCL. Rolled back to ESXi 7.0u3. Documented CPU compatibility matrix for team.
[2025-03-11 23:31:17] WARNING AD replication between DC01 and DC02 failing silently. Kerberos time skew > 5 minutes. Configured NTP hierarchy: DC01 → external NTP → DC02 syncs from DC01. Replication restored.

// INTERACTIVE TERMINAL

Type 'help' for available commands

visitor@infra.admin: ~
Welcome to Sushan's infrastructure terminal. Type 'help' for commands.
──────────────────────────────────────────────────
visitor@infra:~$

// ESTABLISH CONNECTION

$ email admin@sushan.io
$ git clone github.com/your-handle
$ linkedin connect /in/your-profile
$ message "Let's Talk Infrastructure"

// Response time: < 48 hours

// No recruiters selling SaaS tools