01
Zero Trust, IAM & InfraSecOps
Identity, devices, networks, workloads and data—connected through evidence, IAM, modern authentication protocols and continuous improvement.
- Zero Trust maturity
- OIDC & RBAC
- Privileged access
IT Expert · Netherlands
Complex systems.
Clear intent.
I’m Ivan Versluis, an experienced, hands-on IT professional working across enterprise IT, telco and operational technology environments. Since 2000, I have turned complex infrastructure, connectivity and cloud challenges into secure, observable and repeatable systems.
25+years across IT infrastructure
2001Networknet.nl came online
∞curiosity for how systems work
What I do
I connect strategy, architecture and hands-on engineering—so decisions survive contact with production.
About / 01
Built from the infrastructure up.
Since 2000, I have worked with the infrastructure and connectivity that keep enterprise environments running—and helped them evolve.
I act as a technical partner to CIOs, directors and managers: understanding the need, challenging assumptions and translating direction into solid technical solutions. My experience spans enterprise infrastructure, connectivity, cloud-native platforms, identity, API gateways and security architecture across enterprise IT, telco and OT environments.
I combine architectural thinking with hands-on engineering. By connecting infrastructure, security, applications and operations, I help teams turn strategy into solutions they can implement, operate and continuously improve.
Networknet.nl came online in 2001. Its name grew from my fascination with networking and the “net” behind the internet. It became the place where I documented problems I solved, lessons learned and ideas worth sharing—a habit that still defines the site today.
Areas of practice / 02
The systems I care about.
Deep enough to be technical. Broad enough to see the chain.
02
Enterprise IT & platform engineering
Cloud-native foundations that connect infrastructure, Kubernetes and delivery practices without losing operational control.
- Enterprise infrastructure
- Cloud platforms
- Kubernetes & containers
- GitOps
03
Infrastructure as Code
Composable Terraform and delivery pipelines designed around ownership, small blast radii and understandable change.
- Resource modules
- Reusable building blocks
- Pipeline-driven delivery
04
APIs, edge, observability & AI
API gateways, WAF and Cloudflare edge controls, Prometheus observability and applied AI used to enforce policy across systems.
- API gateways & WAF
- Cloudflare edge
- Prometheus & IoT
The homelab / 03
Real systems.
Real constraints.
My homelab brings cloud-native ideas into daily practice across a bare-metal Kubernetes platform, Synology NAS and Raspberry Pi services. It includes encrypted DNS with Pi-hole and Unbound, IoT collectors, API and AI gateways, and end-to-end observability—all managed as code and improved through real use.
Explore the public homelab repositoryPlatform map
Git is the source of truth
- FoundationKubernetes · Synology NAS · Raspberry Pi
- NetworkMikroTik RouterOS · Pi-hole · Unbound · encrypted DNS
- DeliveryGitOps · Terraform · automated lifecycle management
- TrustIAM · OIDC · RBAC · secrets · network policy
- FlowAPI and AI gateways · Cloudflare edge · end-to-end observability
IoT → metrics
GoodWe solar · Daikin climate · Shelly devices · DSMR P1 energy
Working principles / 04
How I approach the work.
- 01
Evidence over assumptions
A control only becomes meaningful when its operation and outcome can be demonstrated.
- 02
Automate with boundaries
Automation should clarify ownership, reduce risk and make change repeatable—not obscure complexity.
- 03
Design for day two
The real test starts after deployment: upgrades, incidents, drift, access reviews and handovers.
- 04
Learn in public
Writing forces precision. Sharing the result turns a solved problem into reusable knowledge.
The notebook / 05
Field notes.
Practical lessons from infrastructure, networking and the homelab.
Learning the network by denying it first
Applying default-deny NetworkPolicies per use case to segment Kubernetes traffic and turn application data flows into explicit rules.
DNS visibility starts on the LAN
Using Pi-hole to make local DNS behavior visible, introduce basic filtering and move upstream resolution towards encrypted DNS.
Giving home systems a common metrics language
Exporting solar, climate, smart-device and energy-meter signals from GoodWe, Daikin, Shelly and DSMR P1 into Prometheus—and making them useful in Grafana.
The archive / 06
Two decades of solved problems.
From Windows, VMware and Linux troubleshooting to Azure and command-line tooling, the original Networknet archive captures earlier chapters of the same journey.
Visit the original archiveSince2001
Documenting what works, what breaks and what comes next.