shahrouz@net:~$

$ whoami

Shahrouz Omidvar

Senior Network Engineer

I design, build and run networks that stay up: ISP cores, data center fabrics and enterprise campuses. For 10 years I've worked across BGP, MPLS, VXLAN EVPN and IS-IS, and I treat observability and automation as part of the design, not an afterthought.

View resume Read the blog Get in touch

Available for consulting and advisory work

Transit A: upstream provider, eBGP TRANSIT-A IXP: settlement-free peering IXP Transit B: upstream provider, eBGP TRANSIT-B edge-1: eBGP to transit and peers edge-1 edge-2: eBGP to transit and peers, overlay head-end edge-2 p-1: IS-IS + MPLS core, BFD p-1 p-2: IS-IS + MPLS core, BFD p-2 spine-1: eBGP underlay, EVPN route server spine-1 spine-2: eBGP underlay, EVPN route server spine-2 leaf-1: VTEP, anycast gateway leaf-1 leaf-2: VTEP, anycast gateway leaf-2 leaf-3: VTEP, anycast gateway leaf-3 leaf-4: VTEP, anycast gateway leaf-4 servers servers servers servers Branch site: WireGuard/IPsec overlay to the edge BRANCH wg/ipsec
01

What I work on

shahrouz# show ip route summary
CodeAreaIn practice
BCore & edge routingBGP, MPLS, IS-IS and OSPF on Cisco IOS / IOS-XR, MikroTik RouterOS and FRR. Multi-homed edges, routing policy and traffic engineering.
CData center fabricsVXLAN EVPN on Nexus 9000, mLAG / vPC, multi-path redundancy and fault isolation, live POD relocations.
OObservabilityZabbix, LibreNMS, Graylog, ElastiFlow, Akvorado and Grafana, with NetBox as the source of truth.
AAutomationPython, Ansible and n8n, Git-backed configuration management, and AI agents in day-to-day operations.
SSecurity & overlaysFortiGate HA, WireGuard, IPsec, DMVPN, VXLAN and OpenConnect overlays across 20+ global endpoints.
02

Now

full history →

Senior Network Consultant

SAPRAMIN International Commerce · contract / advisory · 2023 – present

  • Redesigned the campus and branch topology end to end for better interconnectivity, redundancy and reliability.
  • Moved every site to a new IP addressing plan with zero downtime, and documented all of it.
  • Introduced agentic AI into network operations, speeding up automation work and cutting MTTR.
03

Latest writing

all posts →

  • TCP Deep Dive: From Packets to Byte Streams – MTU, MSS, and Proxy Chaining

    If you come from a packet-forwarding background, MTU and MSS behave nothing like you expect once traffic enters a proxy chain. There is no fragmentation — only re-segmentation of a continuous byte stream. This deep dive …

    TCP · Networking · Proxies · MTU

  • Beyond the Firewall: 4 Fundamental Truths About Microsegmentation

    For decades, IT security has relied on the “castle-and-moat” model: a strong perimeter designed to keep threats out, assuming everything inside is trusted. This perimeter-focused strategy is familiar and …

    Cybersecurity · Security · Networking · Microsegmentation

  • TCP Deep Dive: TCP SYN Cookies, The What, The Why, and The How

    What if a simple packet(s) could bring down the internet? In the world of TCP/IP, vulnerabilities like SYN flood attacks have threatened network stability for decades. This deep dive explores the ingenious mitigation …

    TCP · Networking · Security · Cybersecurity