Network engineering & automation
BGP, SD-WAN, firewalls and VoIP, run through NetBox and automated with Go, Python and Ansible.
Project
PowerDNS-AuthAdmin
A modern, self-hosted DNS administration UI for PowerDNS Authoritative.
Overview
PowerDNS-AuthAdmin manages one or many PowerDNS Authoritative backends from a single web app. It is built for teams that run multi-backend DNS: standalone primaries, primary and secondary groups, and multi-primary clusters, with real access control and a full audit trail.
Highlights
- Multi-backend: standalone, primary/secondary and multi-primary clusters side by side, with sync probes that compare serials and diff records
- Role-based access control with around 60 granular permissions, scoped globally or per team, zone or server
- Local accounts (Argon2id), OIDC single sign-on with group-to-role mapping, TOTP MFA and scoped API tokens
- Per-RRset zone editor with diff-before-apply, templates, cloning and optimistic concurrency
- DNSSEC key and TSIG key management, autoprimary registrations and zone metadata
- Append-only audit log with redacted before-and-after snapshots
- One self-contained Docker image with Prometheus metrics and health endpoints, tested against PowerDNS 4.6 to 5.0
Related expertise
Solutions architecture & leadership
Architecture reviews, target-state designs and hands-on leadership of engineering teams.
Have a hard infrastructure problem?
Open to select consulting, contract and advisory work. Tell me what you are building and where it hurts.