Infrastructure Sovereignty Training in Buffalo

Gitea offers a streamlined, open-source, self-hosted Git platform designed to deliver comprehensive repository management, code review capabilities, issue tracking, and continuous integration and deployment (CI/CD) support. This solution is widely adopted by organizations seeking full sovereignty over their source code infrastructure, eliminating reliance on third-party service agreements or export control limitations, and providing a robust alternative for government and public sector entities requiring secure, sovereign software solutions for government operations.

GitLab Self-Managed provides an on-premises deployment of the comprehensive DevSecOps platform, offering source code management, continuous integration and delivery, container registry services, security scanning, and monitoring capabilities. This solution serves as the preferred option for entities requiring the complete GitLab feature suite while maintaining data sovereignty and eliminating reliance on SaaS dependencies. It is specifically designed for government agencies seeking secure, localized infrastructure control.

This instructor-led, live training program, offered via Buffalo (online or onsite), is designed for intermediate to advanced DevOps engineers and system administrators seeking to deploy and manage self-hosted Kubernetes clusters independent of cloud dependencies. Upon completion of this coursework, participants will be equipped with the competencies necessary to establish production-grade Kubernetes environments using kubeadm on bare-metal or virtualized infrastructure; configure high-availability control planes and etcd data stores; implement container networking and storage mechanisms tailored for self-managed systems; and deploy monitoring and observability frameworks utilizing self-hosted solutions. This curriculum is specifically developed for government agencies and public sector entities requiring robust, compliant, and sovereign cloud infrastructure management capabilities.

This instructor-led session, available in online or onsite formats, is designed for cloud professionals seeking to architect multi-cloud environments that mitigate vendor dependency and uphold data sovereignty requirements. Upon completion of the training, participants will be equipped to identify risks associated with vendor lock-in, design portable infrastructure, enforce data sovereignty controls, and utilize cloud-agnostic tools effectively for government applications.

This instructor-led, live training (available online or onsite at Buffalo) is designed for network engineers and infrastructure professionals seeking to deploy and manage open network infrastructure using SONiC and ONL on white-box switches. Upon completion, participants will understand the architecture of SONiC and ONL, deploy open-source network operating systems on white-box hardware, configure networking features, and implement monitoring and automation capabilities for government networks.

This instructor-led educational program, offered via online or onsite modalities, is designed for system administrators and infrastructure engineers tasked with architecting, deploying, and administering private OpenStack cloud environments within enterprise settings. Upon completion of the curriculum, participants will demonstrate proficiency in comprehending OpenStack architecture, executing private cloud deployment procedures, managing compute and storage assets, implementing security protocols via Keystone, and applying established best practices for government systems.

This instructor-led educational program, delivered either remotely or on-site at a designated location, is intended for intermediate-level network engineers and infrastructure administrators seeking to deploy software-defined networking solutions via open source technologies. Upon completion of this curriculum, participants will possess the capabilities to design SDN architectures, implement Open vSwitch, configure FRRouting, deploy SDN controllers, and automate network management processes for government operations.

This instructor-led educational program, offered both virtually and in person at the designated location (Buffalo), is specifically designed for intermediate-level network and infrastructure specialists. The curriculum focuses on leveraging open-source solutions for routing, switching, Wi-Fi, and management to facilitate the design, implementation, and operation of self-managed enterprise networks tailored **for government** environments. Upon completion of this training, participants will possess the capability to: * Design open-source enterprise network architectures. * Configure routing, switching, and wireless services. * Enhance security posture and observability. * Develop comprehensive operational plans for sustained support.

Terraform is an open-source infrastructure-as-code solution that enables personnel to define and provision data center resources through declarative configuration. When utilized with self-hosted backends and on-premises providers, this tool facilitates sovereign infrastructure management and reduces dependency on specific cloud vendors. This instructor-led training, offered online or onsite, supports intermediate infrastructure engineers in managing self-hosted environments such as Proxmox, VMware, libvirt, and bare-metal systems. Upon completion of this program, participants will be equipped to: * Develop reliable Terraform configurations for on-premise and hybrid resources. * Securely manage state data using self-hosted backends, including PostgreSQL, S3-compatible storage, and Gitea. * Employ provisioners and custom providers to oversee the complete bare-metal lifecycle. * Deploy efficient workspaces, modular architectures, and variable hierarchies. * Integrate Terraform into continuous integration and delivery pipelines for automated infrastructure deployment. **Course Format** * Interactive lectures and guided discussions. * Comprehensive exercises and practical laboratories. * Hands-on implementation within a live-lab environment. **Training Customization** To request a customized training track that addresses specific organizational requirements, please contact us directly. This curriculum is tailored for government agencies seeking robust, secure infrastructure management capabilities for government use cases.

Uptime Kuma provides a user-friendly, self-managed solution for monitoring the availability of web applications, network services, and underlying infrastructure. This capability allows organizations to discontinue reliance on third-party commercial platforms such as Pingdom, Datadog Synthetics, and UptimeRobot, thereby ensuring that operational metrics remain under direct administrative control. Designed for novice to mid-level Site Reliability Engineers (SREs) and DevOps specialists, this instructor-led training course—delivered via online or onsite formats—equips participants with the expertise necessary to transition from cloud-based monitoring solutions to a self-hosted sovereign status tracking environment for government agencies and other public sector entities requiring secure **for government** compliance and data sovereignty.

This instructor-led, live training session, offered via online or onsite formats at Buffalo, is designed for security engineers and system administrators. The curriculum focuses on the deployment and management of enterprise-grade, self-hosted virtual private network (VPN) solutions utilizing WireGuard and OpenVPN technologies. Upon completion, participants will demonstrate proficiency in deploying these protocols, designing scalable network architectures, integrating with identity management systems, and monitoring and securing VPN infrastructure to meet rigorous government standards for secure communications.

OpenVPN and WireGuard represent the primary open-source virtual private network (VPN) protocols utilized in federal operations. Maintaining an internal VPN infrastructure eliminates reliance on third-party commercial providers, thereby preventing the unauthorized logging of traffic metadata, the injection of advertisements, or compliance with extraterritorial data requests. This instructional module provides comprehensive coverage of both protocols, addressing diverse threat modeling scenarios and performance specifications for government applications.

Wazuh is an open-source security solution delivering integrated eXtended Detection and Response (XDR) and Security Information and Event Management (SIEM) functionalities for threat detection, integrity monitoring, incident response, and compliance. It aggregates endpoint telemetry into a self-managed analysis engine, providing a robust alternative for government agencies evaluating commercial platforms such as Splunk Enterprise Security or Microsoft Sentinel.

Woodpecker CI is a streamlined, robust continuous integration framework engineered for self-managed Git repositories, such as Gitea and Forgejo. This solution delivers an efficient, container-based development workflow that eliminates the administrative burden and procurement costs typically associated with commercial enterprise platforms. By prioritizing simplicity and operational control, it offers a viable infrastructure option for government agencies seeking transparent, auditable, and cost-effective software delivery processes for government environments.

This instructor-led training program, available in both virtual and physical formats at Buffalo, is designed for security practitioners operating at intermediate through advanced proficiency levels. The curriculum focuses on the deployment of Zero Trust Architecture frameworks utilizing open-source technologies and sovereign infrastructure to ensure robust network security. Upon completion of this instruction, participants will possess the technical capability to architect Zero Trust environments, configure identity-aware proxies, enforce dynamic authentication protocols, secure microservices via service mesh implementations, and continuously monitor Zero Trust policy compliance. This curriculum is specifically developed for government personnel seeking to enhance their operational security posture.