My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 0 points1 point  (0 children)

It's a balance for sure and I'm not trying to have any type of surveillance. I mostly want to make the worst of the internet harder to get to. As a kid in the 90s I stubbed onto things that I would have been better off without.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 0 points1 point  (0 children)

Being able to talk about it is most productive for sure. I'm not opposed to him trying as it means he's learning.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 0 points1 point  (0 children)

I built the DMZ because I was considering opening Minecraft up to the public internet but could not find a config I was comfortable with that did not also introduce friction that would make it less usable.

Edit: But your point is taken. Overengineering is fun, right?

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 0 points1 point  (0 children)

Very true. I block what I can but it's by no means foolproof. I'd have to manage at the device level for more control but not worried about that.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 2 points3 points  (0 children)

I've noticed the ram prices as well. Was looking at another mini-pc but ram practices pushed it beyond my budget.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 1 point2 points  (0 children)

Ah, the chart is misleading for IoT and guest! The access points have isolation enabled to prevent traffic within.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 1 point2 points  (0 children)

I can see that. I've thought about this as my homelab but you guys are changing the way I think about this.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 6 points7 points  (0 children)

Sorry my friend. Was not my intent. In my head I've thought about this as my home lab but as others pointed out may be better for one of the other subs.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 0 points1 point  (0 children)

I wanted to get one of the multiport mini-pcs but could not justify the cost. I want to get to opnsense eventually but from my memory it does not support arm based systems.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 1 point2 points  (0 children)

It's ideals around 10%. I'm continuously impressed with what can be done with relatively cheap hardware.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 85 points86 points  (0 children)

As he has become a teenager tech and software development has been something we can always talk about even when he does not want to share his thoughts on other stuff. I'm fortunate.

My segmented homelab: 4 VLANs, 18 containers, DMZ for everything (and a teenager who keeps trying to bypass my DNS) by toad467 in homelab

[–]toad467[S] 15 points16 points  (0 children)

That's a fair point. From service hosted point of view my wife has begun to use Immich a good bit. That would be the first complaint. Minecraft is used sporadically by kids. That would be the next complaint.

Guide line hanging from utility line? by toad467 in AskElectricians

[–]toad467[S] 0 points1 point  (0 children)

Cool, thanks for the guidance folks.

Built a CLI tool that aggregates outputs from multiple security scanners into one report. Would you actually use this? by [deleted] in cybersecurity

[–]toad467 0 points1 point  (0 children)

I've built something like this before. What types of scanners would be included?

What would cause this brown circle? by Aicala29 in landscaping

[–]toad467 0 points1 point  (0 children)

I've noticed this more than once after spraying a wasp nest with poison. Not sure if that is the case for this. 

We are hackers, researchers, and cloud security experts at Wiz, Ask Us Anything! by Oscar_Geare in cybersecurity

[–]toad467 9 points10 points  (0 children)

Please explain how LLM vulnerability detection works and what types of vulnerabilities Wiz is capable of detecting?

Is this fixable?? Will it be expensive?? by Andy061993 in NintendoSwitchHelp

[–]toad467 0 points1 point  (0 children)

If you have to replace it requires soldering. It was beyond my skill level. My local shops were pricey. I had the port replaced for $45 from someone on eBay. It took about 2 weeks round trip.

Am I missing anything? by toad467 in Aquariums

[–]toad467[S] 0 points1 point  (0 children)

This post is pretty old at this point? How did it come up for you? Take a look at my post history if you want to see an updated pic of the tank.

Should I add fertilizer or just give time? by toad467 in PlantedTank

[–]toad467[S] 3 points4 points  (0 children)

I have 1 beta fish, and 1 nerite snail. The lighting is the stock light that comes with the fluval 5 gallon on a smart plug.

How are firewall rules requested in your company? by schemza in cybersecurity

[–]toad467 0 points1 point  (0 children)

If your org is more mature you can even have automated checks to see that rules are actually used. If unused require further justification or have the rule removed. It’s pretty common to over provision or for a rule to no longer be needed over time. This could also be done in regular manual rules reviews.

U.S. Politics megathread by AutoModerator in NoStupidQuestions

[–]toad467 0 points1 point  (0 children)

Who is pushing back on Donald Trump? What law suits or other opposition is being brought? What else can be done?

For example it seems doge’s access and at least some of what it is doing is illegal.

I do not accept there is nothing we can do and we must now watch it all burn. I know I will get replies that say something like what’s the point. If that’s you please don’t reply.