Perimeter Engineering
Hardening Edge Architecture: Deploying pfSense Firewalls with UniFi Switching
Small-to-medium businesses frequently suffer from the "all-in-one" consumer router dilemma: lack of granular packet filtering, no isolated DMZ capabilities, and unmanaged camera networks exposing business workstations. We implement an active hybrid architecture that deploys Netgate pfSense appliances as the perimeter stateful gateway while utilizing Ubiquiti UniFi for multi-gigabit access switching and wireless infrastructure.
Implementation & Configuration Standards
- 802.1Q VLAN Trunking: Creating isolated Layer-2 broadcast domains across UniFi switches for Corporate LAN, Guest Wi-Fi, NVR Surveillance Feeds, and IoT devices.
- Hardware-Level Gateway Separation: Disabling automatic daytime updates on UniFi switches and gateways to avoid mid-day port renegotiation drops.
- pfSense Ruleset Hardening: Inter-VLAN blocking rules prohibiting CCTV cameras and IoT appliances from initiating sessions into internal database and POS servers.
- Encrypted XML Off-Site Backups: Nightly configuration snapshots exported off-chassis to ensure instantaneous replacement disaster recovery in under 1 hour.
Included in Essential, Core & Pro Tiers →
Home Assistant & Energy Infrastructure
Local-First Home Assistant: Solar, Battery BMS, and Power Management Integration
Standard smart home setups often stumble when bridging proprietary solar inverters, Bluetooth battery management systems (BMS), and server rack PDUs into a unified, local-first dashboard. Wolf Networks designs and remediates Home Assistant supervisor deployments—configuring local Modbus, MQTT, and Bluetooth proxies to maintain 100% offline continuous power telemetry and intelligent shedding automations.
Supported Integrations & Diagnostic Solutions
- Enphase Envoy & Solar Production: Direct local token authentication to Envoy gateways, extracting real-time per-panel microinverter telemetry without relying on Enlighten cloud uptime.
- Eco-Worthy Inverters & Solar Assistant: Interfacing Solar Assistant serial/USB bridges and Eco-Worthy hybrid inverters directly into Home Assistant via MQTT to track daily PV yield, battery state of charge (SoC), and grid pass-through.
- BLE Battery BMS Integration: Overcoming Bluetooth range limits and connection timeouts with dedicated ESPHome Bluetooth Proxies to continuously poll cell voltages, pack health, and cycle counts from JBD, Daly, and JK Battery Management Systems.
- Emporia Vue & Mains Monitoring: Flashing or integrating Emporia Vue multi-channel CT clamps into Home Assistant's native Energy Dashboard for sub-panel circuit consumption tracking.
- Server & Rack Power Management: Remediation of Dell iDRAC power monitoring sensors and WattBox smart IP PDUs to automate battery shed sequences during off-grid or prolonged grid blackout states.
- Frigate NVR & 3D Printing Stacks: Edge-based AI object detection with Frigate NVR (WebRTC sub-second streaming) alongside local 3D print farms utilizing OctoPrint and Spoolman filament servers.
Ask Wolf Networks About Energy & Smart Automation Deployments →
Cybersecurity & Threat Detection
Zero-Cloud AI Security: Nightly Local CVE Auditing for Medical & Legal Networks
Commercial AI security solutions often demand full log access and telemetry sent to corporate cloud infrastructure—introducing compliance and HIPAA/GLBA privacy liabilities. Wolf Networks utilizes an on-premises, 100% open-source AI engine hosted on dedicated local inference hardware. We match real-time system states against CVE databases and CISA Known Exploited Vulnerabilities (KEV) without transmitting client packets over the public internet.
On-Premises Analytical Pipeline
- 1,000+ Man-Hours Knowledge Tuning: Fine-tuned on deterministic systems logs, firmware changelogs, and vendor security advisories.
- Zero Client Telemetry Leakage: Router configs, camera firmware banners, and VM versions are evaluated completely offline on internal GPUs.
- Proactive 0-Day Filtering: Automatically identifying outdated Dahua, Hikvision, or Netgear hardware hitting active exploit lists before network intrusion occurs.
- Automated Technician Dispatch: Actionable morning briefs generated at 6:30 AM prioritizing hotfixes before maintenance windows commence.
Explore Pro Tier AI-Hardened Monitoring →
UBWA Certified Wireless Engineering
Campus & Outbuilding Connectivity: Ubiquiti Broadband Wireless (PtP / PtMP)
Trenching physical fiber optic cable across commercial yards, asphalt parking lots, marinas, or detached outbuildings is cost-prohibitive. Wolf Networks is certified as an official Ubiquiti Broadband Wireless Admin (UBWA), engineering carrier-grade Point-to-Point (PtP) and Point-to-Multipoint (PtMP) bridge arrays using Ubiquiti airMAX, LTU, and 60GHz Wave radios to supply gigabit throughput across long distances without physical conduit runs.
UBWA Certified Link Planning & Deployment: Every link is engineered using professional RF link budget analysis, 60% Fresnel zone clearance verification, antenna polarization alignment, and dynamic EIRP regulatory compliance.
Operational Diagnostics & Monitoring
- UISP Cloud Telemetry: 24/7/365 active monitoring of CINR (Carrier-to-Interference-plus-Noise Ratio), link budget, and RSSI signal stability.
- Rain Fade & 60GHz Backup Routing: Automated failover to 5GHz redundancy during adverse coastal weather conditions.
- Channel Optimization: Regular audits to eliminate wireless interference from adjacent commercial and maritime radar systems.
- Multi-Building NVR Backhaul: Dedicated surveillance VLANs piped across links to centralize NVR storage pools.
Covered with Weekly Signal Diagnostics in the Pro Tier →
Virtualization & BDR
Mission-Critical Continuity: VMware vSphere ESXi Maintenance & Off-Site Disaster Recovery
When an on-premises physical server suffers motherboard or storage array failure, traditional tape or unverified file backups can lead to days of catastrophic downtime. Wolf Networks maintains VMware vSphere and Windows Server stacks with active hypervisor health monitoring, nightly incremental block-level images, and off-site VMDK disk verification.
Continuity Architecture
- Hypervisor Capacity & Sensor Audits: Datastore allocations, SSD endurance, and RAM wear tracked to preempt hardware failure.
- Block-Level VM Snapshots: Nightly differential sync coupled with weekly full images preserved in immutable local and off-site repositories.
- Patch Verification: Controlled staging of Windows Server cumulative updates during scheduled weekend maintenance windows.
Review Core and Pro Tier Virtualization Coverage →
Hardware Servicing & Open-Source Robotics
Autonomous Robotics: Neato Cloud Replacement (Vacuula & BrainSlug), Deebot Bumper Servers & Valetudo Rooting
Modern autonomous vacuums feature enterprise-grade LiDAR, camera vision, and mechanical drive gearboxes—yet manufacturers routinely abandon backend cloud infrastructure (as seen with Neato Robotics shutting down) or enforce strict telemetry to overseas servers. Wolf Networks actively supports open-source robotics preservation, firmware rooting, and self-hosted server deployments.
Robotics Servicing, Firmware & Self-Hosted Infrastructure
- Neato Cloud Replacement (Vacuula & BrainSlug Beta Testing): Following Neato's server shutdown, Wolf Networks actively helped beta test the open-source replacement server ecosystem, including Vacuula and BrainSlug firmware modifications, reviving orphaned D-series robots with local LAN control.
- Ecovacs Deebot Bumper Self-Hosting: Complete setup and isolation of local Bumper server stacks in Docker (DNS interception, certificates, and Nginx reverse proxy co-existence), keeping Ecovacs vacuums operational without cloud lockouts or port collisions.
- Valetudo Firmware Installation: Unlocking root Linux shell access and flashing open-source Valetudo firmware onto supported Roborock and Dreame vacuums, severing vendor cloud dependencies.
- Mechanical & Board Repairs: LiDAR LDS turret motor swaps, drive wheel gearbox overhauls, drop sensor replacements, and board-level component soldering.
- Home Automation: 100% on-premises Home Assistant integration via MQTT for responsive, zero-cloud room cleaning and SVG live floor mapping.
Inquire About Local Bench Repairs & Open-Source IoT Stacks →
