NETWORK & SYSTEMS ENGINEER // (VHUWON MATHERS • @sudovu)
Official digital portfolio and engineering hub of Bhuwan Gautam (also known as Vhuwon Mathers / @sudovu). Expert in internal enterprise network architectures, campus topologies (schools, colleges, corporate business houses, metropolitan city offices, and municipalities), multi-site SD-WAN deployments, and zero-trust internal network separation & isolation across Cisco IOS-XE, Juniper Junos, Fortinet, and hardened Linux infrastructure.
Verified lab topologies, production web gateways, and container configurations built with strict design principles.
A resilient multi-area enterprise topology featuring ABR route summarization, redundant gateway routing, VLAN segmentation, and ACL policy enforcement.
Production web gateway with HTTP/2 enforcement, automated TLS certificates, custom security headers, and Anycast-routed DNS zones across distributed nodes.
Modular container architectures utilizing custom Dockerfiles, persistent storage volumes, and bridge network interfaces for secure service containment.
Methodical execution across foundational networking, server environments, and digital communications.
Architecting robust internal networks for schools, colleges, corporate business houses, metropolitan city offices, and municipalities. Deploying multi-branch SD-WAN tunnels with intelligent path selection, automated IPsec failover, and quality-of-service (QoS) prioritization.
Engineering strict internal network segmentation using VRF-Lite, 802.1Q VLANs, Private VLANs (PVLANs), and 802.1X Network Access Control (NAC). Completely isolating administrative records, student/faculty traffic, public guest Wi-Fi, CCTV surveillance, and e-Governance systems.
Multi-vendor carrier and campus routing across Cisco IOS-XE, Juniper Junos, and MikroTik. Multi-area OSPFv2/v3, eBGP/iBGP transit & IXP peering, MSTP loop-free switching rings, LACP EtherChannels, and DHCP Snooping with Option 82.
Fortinet FortiGate, pfSense HA (CARP), deterministic Carrier-Grade NAT (RFC 6598 100.64.0.0/10), Ubuntu/Debian server hardening, Nginx reverse proxy with TLS 1.3, Docker microservice isolation, and authoritative Anycast DNS routing.
Live traffic visibility, proactive anti-phishing radar, vulnerability hardening ("anti-crack" protection), and Web Application Firewall (WAF) interception for gautambhuwan.com.np.
Sub-second cross-device SSE beacon detecting real IPs, cities, ISPs, and active client sessions.
Continuous scanning for typosquatted spoof domains and social engineering harvesting attempts.
Real-time interception of SQL injection, cross-site scripting (XSS), and brute-force exploit attempts.
Strict Multi-Factor Authentication enforcement for admin access, paired with tamper-proof audit trails.
Whether it is network topology design, Linux infrastructure deployment, or system troubleshooting, let us connect and build together.
