Networking

Homelab Part 4: Docker Host, Portainer, and Macvlan

In Part 3, I created the VLAN structure. In this part, I build the container platform inside the CONTAINER VLAN. The goal is not only to run Docker. I want important containers to have real lab IP addresses. That way, pfSense rules and Wazuh events can point to the real service, not only to the Docker host. What I Built VM name: prod-docker VM ID: 103 OS: Ubuntu Server 24.04 VLAN: 30 / CONTAINER Host IP: 10.10.30.100 Docker UI: Portainer CE Macvlan net: 10.10.30.0/26 n8n IP: 10.10.30.10 ‹ › ...

Homelab Part 3: VLAN Segmentation and Initial DHCP

In Part 2, the Alpine jumpbox gave me a stable path into pfSense. In this part, I turn the flat internal LAN into a segmented lab. The goal is to create the VLAN interfaces, give each segment a gateway IP, enable temporary DHCP where it helps installation, and leave the final firewall policy for a dedicated firewall-rules post. What I Built Parent interface: vtnet1 VLAN 10: SIEM VLAN 20: DEFENCE VLAN 30: CONTAINER VLAN 40: PENTEST VLAN 50: HONEYPOT VLAN 60: CLIENT VLAN 99: ISOLATED Current addressing: ...

Homelab Part 2: Alpine Jumpbox and pfSense Access

In Part 1, pfSense booted with a WAN side and a LAN side. In this part, I add the first internal Linux VM: a small Alpine jumpbox on the pfSense LAN. This jumpbox becomes my first stable door into the lab. I use it for SSH, local forwarding, package installs, and later access to internal services without exposing those services directly. What I Built VM name: prod-alpine VM ID: 102 OS: Alpine Linux Network: vmbr1 IP: 10.10.1.50/24 Gateway: 10.10.1.1 Role: jumpbox / bastion ‹ › ...

Homelab Part 1: Proxmox and pfSense Foundation

This is the first layer of the lab. I start with one Proxmox node, one internal VLAN-aware bridge, and pfSense as the router and firewall between the outside network and the future lab networks. I keep the goal small on purpose. I do not install services yet. Before I add Windows, Docker, Wazuh, Kali, honeypots, or malware-analysis machines, I want the network base to be correct. What I Built Physical host: homelab Hypervisor: Proxmox VE Firewall VM: prod-firewall WAN bridge: vmbr0 -> home LAN / upstream router LAN bridge: vmbr1 -> internal lab bridge, VLAN-aware, no physical uplink pfSense WAN: vtnet0 -> 192.168.1.87/24 pfSense LAN: vtnet1 -> 10.10.1.1/24 ‹ › ...