JL_ / / ENGINEER

Computer Network Engineer · Security · Web Administrator · Voice Systems Engineer · Artificial Intelligence

This static, dependency-free website is hosted on a private server behind a reverse proxy and web application firewall. It benefits from DDoS protection, traffic filtering, and additional security controls that help defend against malicious requests, automated attacks, bot nets, and service disruptions against enterprise systems.

The site also uses DNSSEC to help prevent DNS spoofing and tampering. Its top-grade rating from Qualys SSL Labs indicates strong HTTPS and TLS configuration with PQC (Post-Quantum Cryptography) key exchange. Together, these measures improve visitor security, website availability, and website integrity.

This website domain uses private registration to help conceal the owner's identity. This reduces exposure to spam, scams, harassment, identity theft, social engineering, domain hijacking and other targeted attacks.

Locally Ran Two A.I. Agent Security Analysis Lab

Two A.I. Agents Communicating: Agent B challenges Agent A's analysis, then writes a report for review.

This lab functions as a local defensive security analyst and independent reviewer for Linux. It collects system evidence, removes obvious secrets, analyzes the environment with Agent A, challenges the analysis with Agent B, and writes a structured report for human approval.

Its primary purpose is to provide a repeatable defensive security review process for services, network exposure, system configuration, permissions, packages, resource usage, and operational failures. Its most useful purpose is to support safer, repeatable, evidence-based server hardening without allowing the AI system to make unreviewed changes unless you program it to do so.

Reverse Proxy Server

Benefits of A Reverse Proxy Server

This site uses a reverse proxy that supports PQC (Post-Quantum Cryptography) key exchange

Hides the origin IP address: Proxied DNS records return proxy network IP addresses to visitors rather than your web server’s address. This makes it harder for attackers to bypass the proxy.
DDoS protection: Traffic is absorbed and filtered across the proxy network before reaching your server.
Web Application Firewall: HTTP requests can be inspected and common attacks such as SQL injection, cross-site scripting, malicious bots, and exploit attempts can be blocked.
Caching and reduced server load: Static content can be served from edge locations, reducing bandwidth and CPU usage on the origin server.
TLS handling: Public HTTPS certificates can be provided while maintaining a separate encrypted connection to your origin server.
Rate limiting and bot controls: Abusive clients, login attempts, scraping, and suspicious traffic can be restricted before reaching the web server.
Performance features: Compression, HTTP/2 or HTTP/3, image optimization, and global edge delivery can improve page-load times.
Origin resilience: Traffic spikes can be absorbed, and load balancing or failover configurations can be supported.

Suricata Lab

Engineering IPS & IDS System

Using Suricata as an IPS and IDS

Cost-effective security: Provides enterprise-style firewall and monitoring features without requiring an expensive proprietary appliance.
Intrusion detection: Identifies suspicious traffic, exploit attempts, malware communication, network scans, and policy violations.
Intrusion prevention: Can actively block traffic that matches malicious rules when deployed in IPS mode.
Deep packet inspection: Examines network traffic beyond basic source, destination, and port filtering.
Threat signatures: Uses rule sets to detect known attacks and suspicious traffic patterns.
Protocol awareness: Supports inspection of protocols such as HTTP, TLS, DNS, SMB, SSH, and others.
Detailed event logging: Generates alerts and metadata that are useful for investigation and incident response.
Network-wide visibility: Protects multiple internal devices at the network gateway without requiring a security agent on every endpoint.
Flexible monitoring modes: Allows you to begin with IDS alerting and later enable IPS blocking after reviewing alerts and tuning the rules.
Practical deployment considerations: Requires adequate CPU and memory. Encrypted traffic may limit inspection, while poorly tuned rules can generate false positives or reduce network throughput.