Domain Registration
Registration and management of .it, .eu, .com and all major TLDs and ccTLDs. Full lifecycle: registration, renewal, transfer, whois privacy and authoritative DNS. We operate as an accredited .it Registrar (code NOZE-REG).
Network Services & Hosting
Domains, managed hosting, PEC and Linux infrastructure — since 2000, on a fully open-source stack
The infrastructure that powers your business
Since 2000 we have been designing, configuring and maintaining network services for businesses, public bodies and professionals. We don't resell hosting packages: we work alongside your IT team to build solid, transparent, lock-in-free architectures — based on open-source software we know from the ground up.
We favour on-premise deployment at the client's site or on cloud resources owned by the client: we handle operations, but data and infrastructure remain under your control. That is how we act as a partner, not a vendor.
noze S.r.l. is an accredited .it domain Registrar (code NOZE-REG) and an essential entity under the NIS2 directive.
Our services
Network & hosting services
Managed Hosting
Fully managed hosting on Linux infrastructure, deployed on-premise at the client's site or on cloud resources owned by the client. Web space, databases, automatic TLS certificates via Let's Encrypt, daily backups and proactive monitoring.
Managed Housing
Full management of virtual environments hosted at the client's premises or on their cloud provider of choice. Configuration, hardening, 24/7 monitoring and guaranteed SLAs — without your team having to handle day-to-day operations.
PEC — Certified Email
Activation and management of PEC mailboxes as an Aruba reseller, compliant with Italian and European regulations. Standard client integration, compliant archiving and migration support.
DNS Parking & Maintenance
DNS zone management for parked or production domains. A, CNAME, MX, TXT, SPF, DKIM, DMARC records — with monitored propagation and optimised TTLs.
Serverless & Function as a Service
Design and deployment of serverless and FaaS architectures on the client's cloud platform (AWS Lambda, Google Cloud Functions, Azure Functions). Event-driven, pay-per-use, auto-scaling.
Fullstack Environments
Design and deployment of complete fullstack environments: frontend, backend, database, caching, code execution. From requirements analysis to production launch, with CI/CD and infrastructure as code.
Design & Advisory
We work alongside your IT team to design network architectures, select providers, size resources and plan migrations. We don't deliver recipes: we build together.
Our stack
Linux & Open Source
We have been working with Linux every day since 2000. It's not an option: it's the foundation of everything we build. We choose open-source software because it is inspectable, modifiable and backed by global communities with lifecycles that outlast many commercial products.
For our clients this means total transparency over the infrastructure, zero vendor lock-in and the certainty that every component can be audited, replaced or evolved without depending on a single licence.
Apache HTTP Server & Nginx
The two open-source web servers that power most of the world's Internet traffic. We configure them as standalone servers, reverse proxies, caching layers or TLS terminators — depending on the architecture.
HAProxy & Keepalived
High-performance TCP/HTTP load balancing with HAProxy, automatic failover and high availability with Keepalived (VRRP). Sticky sessions, granular health checks and zero-downtime deployments.
Postfix, Dovecot & Rspamd
We design and configure complete email stacks on client infrastructure: Postfix as MTA, Dovecot for IMAP/POP3, Rspamd for antispam filtering. DKIM, SPF, DMARC and ARC configured by default.
BIND, PowerDNS & Unbound
Authoritative and recursive DNS for public and private zones. DNSSEC, split-horizon, primary/secondary clustering, database backend integration and validating resolvers with Unbound.
nftables, Suricata & Fail2Ban
Perimeter protection with nftables (iptables successor), intrusion detection with Suricata (IDS/IPS) and automatic brute-force mitigation with Fail2Ban. Network segmentation and versionable firewall policies.
WireGuard & OpenVPN
Site-to-site and road-warrior VPN tunnels with WireGuard (modern, in-kernel) and OpenVPN (universal compatibility). Strong encryption, minimal configuration, integration with centralised authentication.
MariaDB & PostgreSQL
The two leading open-source relational databases. Synchronous and asynchronous replication, automated backups, query tuning, monitoring with Percona Toolkit and pgBadger. No licences, no lock-in.
OpenSSL & Let's Encrypt
TLS/SSL certificate management: CSR generation, installation, automatic renewal with Certbot. Modern cipher suites for A+ SSL Labs rating. All the PKI you need, with no licence costs.
Prometheus, Grafana & LibreNMS
End-to-end infrastructure and network monitoring. System metrics with Prometheus, dashboards with Grafana, network discovery and mapping with LibreNMS. Integrated alerting across every channel.
Ansible, Docker & Terraform
Infrastructure as code: provisioning with Terraform, configuration with Ansible (versioned, idempotent playbooks), application deployment with Docker and Podman. Every environment is reproducible and auditable.
Linux & System Administration expertise
Our team operates across the entire Linux and open-source ecosystem. We go beyond web services: we manage complete infrastructures, from low-level networking to centralised authentication.
- Installation, hardening and lifecycle of Linux distributions (Debian, Ubuntu Server, RHEL/AlmaLinux, Rocky Linux)
- Virtual server administration (KVM, Proxmox, VMware ESXi)
- Storage: LVM, software RAID, NFS, Samba/CIFS, GlusterFS, ZFS
- Advanced networking: VLANs, bonding, bridging, static and dynamic routing with FRRouting (BGP, OSPF)
- Monitoring with Zabbix, Prometheus + Grafana, Nagios/Icinga, LibreNMS
- Centralised log management with rsyslog, Logrotate, Loki, ELK stack
- CI/CD automation: GitLab CI, GitHub Actions, Jenkins — all on Linux
- LAMP/LEMP, Node.js, Python, PHP-FPM, Ruby, Go environments
- Serverless and FaaS architectures on AWS, Google Cloud, Azure
- Backup with Restic, BorgBackup, rsync and custom retention policies
- Centralised authentication with OpenLDAP, FreeRADIUS and 802.1X
Frequently Asked Questions
Which TLDs can I register through noze?
We register .it domains as an accredited Registrar with the Italian Registry (Registro.it, code NOZE-REG), plus .eu, .com, .net, .org and hundreds of other gTLDs and ccTLDs. We manage the full lifecycle: registration, transfer, renewal and registrant changes.
What kind of hosting do you offer?
We offer managed hosting and managed housing: we handle the full Linux infrastructure, but we preferably deploy it on-premise at the client's site or on cloud resources owned by the client. The stack is fully open source — Apache/Nginx, MariaDB/PostgreSQL, PHP-FPM — and includes TLS certificates, daily backups and technical support.
Why on-premise or client-owned cloud?
We believe data and infrastructure should remain under the control of whoever owns them. We configure and manage everything, but the resources — servers, VMs, cloud accounts — stay in the client's ownership. This guarantees data sovereignty, full portability and zero lock-in towards us or any third party.
Why do you choose open-source software?
It's not about saving money — it's a technical and strategic choice. Open-source software is inspectable, modifiable and doesn't create dependency on a single vendor. Projects like Linux, Apache, PostgreSQL and WireGuard have global communities and lifecycles that outlast many commercial products. For us, this means guaranteeing transparency, continuity and full control over our clients' infrastructure.
What sets your approach apart?
We work as your team's partner, not as an external supplier. We've been on Linux since 2000 and we are classified as an essential entity under the NIS2 directive. We design architectures, perform hardening according to CIS benchmarks, automate with Ansible and monitor proactively. Every server has a versioned configuration playbook and a tested disaster recovery plan.
Do you offer migration services from other providers?
Yes, we handle complete migrations: current-state analysis, cutover planning, data transfer, DNS changeover and post-migration verification. We minimise downtime by coordinating every phase with your team and the originating provider.
How do you handle PEC (Certified Email)?
We are an Aruba reseller for PEC. We activate compliant mailboxes, configure access from standard email clients (Outlook, Thunderbird, smartphones) and support compliant archiving. For businesses, we offer multi-user PEC with a custom domain.
What support levels do you offer?
Technical support via ticket, email and phone with differentiated SLAs. For managed services, monitoring is active 24/7 with automatic alerting and proactive intervention. For basic services, support is available during business hours with guaranteed response times.
Designed for
Industry
SMEs
NIS2, security and AI governance without a huge in-house team.
IndustryPublic Administration
In-house AI for municipalities, provinces and regions — no extra-EU cloud.
IndustryHealthcare
In-house clinical AI, MDR pathway, data that stays in the hospital.
IndustryResearch & Academia
25+ years of applied R&D, partner of European consortia.
IndustryMSP & System Integrators
White-label solutions, enterprise support and a dedicated channel.
IndustryProfessional Firms & Consultants
Law firms, accountants and consultants who manage compliance, AI Act and NIS2 for their clients.
Get in touch
Need network services?
Tell us about your project: we'll analyse it together and build the solution.