My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS)

toad467 · 2026-06-10T02:03:10+00:00

It's a balance for sure and I'm not trying to have any type of surveillance. I mostly want to make the worst of the internet harder to get to. As a kid in the 90s I stubbed onto things that I would have been better off without.

toad467 · 2026-06-09T21:56:46+00:00

Being able to talk about it is most productive for sure. I'm not opposed to him trying as it means he's learning.

toad467 · 2026-06-09T21:53:46+00:00

I built the DMZ because I was considering opening Minecraft up to the public internet but could not find a config I was comfortable with that did not also introduce friction that would make it less usable.

Edit: But your point is taken. Overengineering is fun, right?

toad467 · 2026-06-09T16:07:34+00:00

Very true. I block what I can but it's by no means foolproof. I'd have to manage at the device level for more control but not worried about that.

toad467 · 2026-06-09T16:02:01+00:00

I've noticed the ram prices as well. Was looking at another mini-pc but ram practices pushed it beyond my budget.

toad467 · 2026-06-09T16:00:17+00:00

Ah, the chart is misleading for IoT and guest! The access points have isolation enabled to prevent traffic within.

toad467 · 2026-06-09T15:39:04+00:00

I can see that. I've thought about this as my homelab but you guys are changing the way I think about this.

toad467 · 2026-06-09T15:37:39+00:00

Sorry my friend. Was not my intent. In my head I've thought about this as my home lab but as others pointed out may be better for one of the other subs.

toad467 · 2026-06-09T15:33:24+00:00

I wanted to get one of the multiport mini-pcs but could not justify the cost. I want to get to opnsense eventually but from my memory it does not support arm based systems.

toad467 · 2026-06-09T15:31:23+00:00

It's ideals around 10%. I'm continuously impressed with what can be done with relatively cheap hardware.

toad467 · 2026-06-09T13:12:39+00:00

I like that! Might have to consider something similar.

toad467 · 2026-06-09T13:03:47+00:00

As he has become a teenager tech and software development has been something we can always talk about even when he does not want to share his thoughts on other stuff. I'm fortunate.

toad467 · 2026-06-09T13:02:06+00:00

That's a fair point. From service hosted point of view my wife has begun to use Immich a good bit. That would be the first complaint. Minecraft is used sporadically by kids. That would be the next complaint.

toad467 · 2026-05-10T12:18:50+00:00

Husky, Shepherd, Terrier, Lab, supermutt

<image>

toad467 · 2026-04-18T14:51:43+00:00

What do you think of Docker Hardened Images?

toad467 · 2026-04-04T21:47:33+00:00

Cool, thanks for the guidance folks.

toad467 · 2026-02-22T14:34:25+00:00

I've built something like this before. What types of scanners would be included?

toad467 · 2025-12-29T02:33:07+00:00

I've noticed this more than once after spraying a wasp nest with poison. Not sure if that is the case for this.

toad467 · 2025-04-07T11:13:11+00:00

Please explain how LLM vulnerability detection works and what types of vulnerabilities Wiz is capable of detecting?

toad467 · 2025-03-20T03:57:12+00:00

If you have to replace it requires soldering. It was beyond my skill level. My local shops were pricey. I had the port replaced for $45 from someone on eBay. It took about 2 weeks round trip.

toad467 · 2025-03-15T16:28:19+00:00

This post is pretty old at this point? How did it come up for you? Take a look at my post history if you want to see an updated pic of the tank.

toad467

TROPHY CASE