CASTLE DIGITAL
Available for engagements — East Africa

Enterprise Infrastructure
& Network Telemetry
Engineering

High-throughput performance tuning, immutable infrastructure management, and tailored operations for networks and ISPs across East Africa. From BGP path optimisation to zero-trust hosting — built to operate, not just run.

Start a technical brief View service matrix
10+ Years in production systems
99.9% Managed infrastructure uptime SLA
24hr Engagement response commitment
EA-1 Region-native infrastructure
NetFlow IPFIX · sFlow v5/v9 ingestion
ZFS/LVM Immutable storage arrays
KVM/OVH Bare-metal hypervisor hosting
NGINX Hardened web infrastructure
BGP Peering path optimisation
Service matrix

Precision-engineered delivery disciplines

Each engagement is scoped, contracted, and operated as a discrete engineering practice — not a helpdesk ticket.

NetFlow Analytics as a Service

NaaS · Network Telemetry

Full-stack network visibility layer — from raw flow export ingestion through to actionable traffic intelligence dashboards. Purpose-built for Kenyan ISPs and enterprise WAN operators who need answers, not alerts.

  • Vendor-agnostic — integrates with your existing network hardware
  • Real-time traffic visibility across all interfaces and peers
  • Anomalous traffic and volumetric event detection with alerting
  • Per-subscriber and per-prefix bandwidth accounting
  • Managed dashboards, alerting, and long-term flow retention
Request scoping call →

High-Availability Managed Hosting

Infrastructure · Web & Application

Containerised, hardened, and Kenya-localised hosting infrastructure for businesses that cannot afford downtime. Every stack is individually tuned — no oversold shared environments, no one-size-fits-all provisioning.

  • KVM / LXC containerised multi-tenant isolation
  • LiteSpeed-powered shared hosting via CyberPanel
  • Automated Let's Encrypt with HSTS enforcement
  • Local and cloud backup included on all hosting plans
  • KIXP-peered infrastructure for low-latency Kenya access

// pricing from

KES 1,500 /mo — Starter
KES 3,500 /mo — Business
KES 8,000 /mo — VPS
View hosting plans →

Ghala Backup Ecosystem

BaaS · Disaster Recovery

Ghala — Swahili for "storehouse." Automated, immutable, and resilient backup architecture designed for mission-critical workloads where data loss is simply not an option. Local speed, cloud durability.

  • Dual-destination backup — local NAS and cloud object storage
  • ZFS immutable snapshots with configurable retention schedules
  • Defined RTO ≤ 4hr / RPO ≤ 1hr for standard enterprise tiers
  • Encrypted-at-rest with customer-held key escrow
  • Monthly DR simulation testing included at all plan tiers
Scope your DR architecture →

Bespoke Systems Architecture

Consulting · Short-term, High-impact

Targeted, high-intensity consulting engagements for organisations that need expert systems-level intervention — not a managed service retainer. Scoped deliverables. Fixed timelines. Measurable outcomes.

  • Linux kernel parameter tuning for high-throughput network appliances
  • Advanced ZFS / LVM RAID array design and migration
  • Open-source monitoring pipeline architecture (Prometheus, VictoriaMetrics)
  • Structured cabling design and certification for enterprise LANs
  • Cloud infrastructure audit and cost-optimisation engagements
Submit a project brief →
NaaS — Network Analytics

Total visibility across your network fabric

Purpose-engineered for ISPs, enterprise WAN operators, and data centre networks across East Africa. Built to answer the questions your existing tools cannot.

  • Know exactly where your bandwidth goes

    Stop guessing which applications, subscribers, or peers are consuming your capacity. Get granular, real-time traffic breakdowns by source, destination, application class, and autonomous system — across your entire network simultaneously.

  • Catch threats before your links saturate

    Anomalous traffic patterns and volumetric events are surfaced in real time — giving your NOC a clear picture of what's happening before customers start calling. Configurable alerting thresholds mean your team gets notified the moment something deviates from baseline, with enough context to act decisively.

  • Validate what you're actually paying for

    Upstream transit invoices are reconciled against your own independent traffic measurements. Billing disputes become data-driven conversations — not arguments based on a provider's word alone.

  • Optimise peering and routing decisions

    Traffic engineering decisions backed by long-term flow intelligence — not gut feel. Identify which peers deliver the best path performance and where re-routing would reduce transit cost without degrading quality.

  • Regulatory and audit-ready reporting

    Structured traffic data retained and exportable for compliance reporting, fair-use policy enforcement, and subscriber accountability — formatted to your operational and regulatory requirements.

// what you gain on day one

Vendor-agnostic deployment

Works with existing routers and switches — no forklift upgrades, no new hardware required.

Live traffic intelligence

Real-time dashboards surfacing the metrics that matter to your network operations team.

Real-time anomaly detection

Anomalous events surface immediately with full context — your team has what it needs to act before customers notice.

Historical flow retention

Long-term traffic history for forensics, trending, capacity planning, and billing audit.

Managed or self-hosted

Deployed on Castle Digital infrastructure or delivered into your own environment. Your data stays where you need it.

White-glove onboarding

Full setup, configuration, and handover handled by the same engineer who built the system.

Request a private technical briefing →
Technical intake

Pre-qualify your engagement

Skip the back-and-forth. Answer a short technical questionnaire so engagements can be scoped accurately from the first call.

Step 1 of 3

Organisation & contact details

Step 2 of 3

Infrastructure profile

Step 3 of 3

Service requirements & brief

Prefer to skip the form and reach out directly?

Email info@castledigital.co.ke

Brief received

Your technical brief has been submitted. A scoping response will follow within one business day. For urgent matters, reach directly via WhatsApp.

WhatsApp for urgent queries
About

The engineer behind the infrastructure

Castle Digital

Senior Systems & Network Engineer

Location Nairobi, Kenya
Experience 10+ years
Availability Open to engagements
Contact +254 785 646 966
Email info@castledigital.co.ke
Region East Africa · Remote-capable

Castle Digital is a precision-focused, solopreneur systems engineering practice based in Nairobi. The practice was built on a simple premise: the gap between generic IT support and true systems-level engineering capability is where the most expensive problems live.

With over a decade in production systems administration, network operations, and infrastructure architecture — spanning ISPs, enterprise LANs, and cloud-hybrid deployments across East Africa — the focus has shifted to the domains where deep expertise creates asymmetric value: network telemetry, immutable backup architectures, and high-availability infrastructure that actually holds under pressure.

Every engagement is direct. No account managers, no junior handoffs. You work with the engineer who designed the solution.

// core stack

Linux NGINX KVM/QEMU Proxmox ZFS NetFlow/IPFIX BGP/OSPF MikroTik Grafana Prometheus Docker CyberPanel Veeam Partner Ansible