Locking unmanaged tenants to their IP: anti-spoofing for dedicated servers and Proxmox VMs (MikroTik, Cisco Nexus, Proxmox)
How we stop unmanaged dedicated servers and VMs from adding extra IPs, changing MACs, ARP/NDP spoofing or running rogue DHCP/RA on a shared /24 — with MikroTik raw rules, Cisco Nexus port-security and the Proxmox VE firewall. Verified on production, with the gotchas.