Network design & security
Routing, segmentation and secure edge design with MikroTik, pfSense and Fortinet.
I build infrastructure that stays clear under pressure.
I’m Lucas Quaresma, an infrastructure, telecom and DevOps engineer, and a dev. For 10+ years, I’ve worked where networks, cloud, automation and code meet.
Engineering every layer that keeps a service available.
From packet flow to deployment flow, I work across the boundaries that usually slow teams down.
Cloud & virtualization
Practical environments across Proxmox, VMware, AWS and containerized workloads.
DevOps & automation
Repeatable delivery through Ansible, GitLab CI/CD and purposeful scripting.
VoIP & availability
Asterisk, FreePBX and cloud PABX systems designed for operational continuity.
Products built for operational responsibility.
Larger systems where product design, security, delivery and long-term operations meet.
NetKeep
Active · Open source
A free, modern control panel for collecting, versioning, comparing and protecting network device configurations. Built for ISPs and infrastructure teams with safe defaults and real operational depth.
- Read-only collection with controlled approval of destinations, credentials, drivers and SSH host keys.
- Permanent Git history with search, downloads and unified or side-by-side configuration diffs.
- Encrypted local or S3-compatible backups, plus private Git mirroring for redundancy.
- Inventory, roles, audit logs, notifications and read-only synchronization with LibreNMS and NetBox.
Technology: Laravel 13, React 19, PostgreSQL, Oxidized, Docker.
Project detailsExplore the projectLatest releaseInstallation guide
IpamFerry
Active · Open source
A self-hosted workspace for planning and executing auditable migrations from phpIPAM to NetBox. It turns a reviewed migration plan into a controlled, verifiable process.
- Uses the phpIPAM API or a mysqldump SQL source to discover the migration inventory.
- Builds a reviewable, destination-specific plan and requires approval of its exact fingerprint.
- Applies through the official NetBox REST API, with checkpoints that avoid duplicating objects when a run resumes.
- Exports an audit bundle and preserves unmapped or unsafe data for review instead of discarding it silently.
Technology: Laravel 13, PHP 8.4, Inertia 3, React 19, TypeScript, PostgreSQL, FrankenPHP/Caddy, Docker Compose.
Small tools for real operational work.
Open-source projects shaped by infrastructure tasks that should be reliable and repeatable.
PTR Zone Generator
A dependency-free Python utility that builds reverse DNS zone files from ranges and CIDR notation for BIND, PowerDNS and Technitium.
Python, DNS, IPv4
Nmap Scanner & PDF Reporter
A guided TCP/UDP scanning workflow with service detection and a clean, portable PDF report for authorized assessments.
Python, Nmap, Security
Useful answers, without the noise.
A growing set of browser-first utilities for addressing, network planning and terminal workflows. No accounts, no tracking.
- IP / CIDR Calculator — Inspect IPv4 and IPv6 networks, ranges, masks and address counts without sending data anywhere.
- IP Inspector — Classify an address locally, then optionally inspect its network, location, risk and reverse DNS.
- CIDR Compare + Aggregator — Compare aligned networks and collapse mixed IPv4 and IPv6 prefix lists without losing precision.
- PTR Generator — Build compact or expanded IPv4 reverse zones for BIND and local-data-ptr records for Unbound.
- Subnet / VLSM Planner — Allocate IPv4 LAN, point-to-point and loopback networks or plan IPv6 child prefixes.
- MTU / MSS Calculator — Model encapsulation stacks, Ethernet wire cost and practical TCP MSS commands for common platforms.
International range.
Comfortable working across disciplines, languages and time zones. I care about infrastructure that people can understand, operate and improve.
- Languages
- Portuguese · English C1 · Spanish
Have an infrastructure problem worth untangling?
For technical collaborations and thoughtful conversations.