Network segmentation in the homelab

2019-03-01 22:36:00

Continuing where I left off a few weeks ago, I've redone the network design for my homelab. When we last looked at the network, it was all flat with all VMs tucked in a single subnet behind a pfSense router. Because I want to work towards implementing the CSC in my lab, I've moved everything about quite a lot.

• The pfSense box now has multiple interfaces, each with its own subnet.
• Each subnet has its own vSwitch in VMWare. 
• There are, at this moment, thirteen VMs running on the R410 as shown in the image above.
• Workstations are/will be segregated into their own subnet, with a "local" AD domain controller for high availability.
• All server systems are tucked into a safe server net.
• There's a modicum of firewall rules, determining which traffic can pass between the subnets. 
• I'm in the process of putting Squid onto the pfSense box, to proxy the outgoing traffic. 

kilala.nl tags: work, studies,

View or add comments (curr. 0)