Network

Description of my networking setup

Physical Layout

network-physical.png

VLAN Segmentation

VLAN 1 (LAN)

The primary home network for devices and services that don't need to be publically facing to the Internet.

Name LAN
CIDR 10.0.1.1/21
Range 10.0.0.1 - 10.0.7.254

VLAN 8 (DMZ)

A DMZ for devices and services that are meant to be exposed to the Internet.

Name DMZ
CIDR 10.0.8.1/24
Range 10.0.8.1 - 10.0.8.254

VLAN 9 (WARP)

A network where all outbound traffic is routed through a WireGuard VPN to protect privacy.

Name WARP
CIDR 10.0.9.1/24
Range 10.0.9.1 - 10.0.9.254

Subnet IP Ranges

LAN (VLAN1)

LAN - The primary home network for devices and services that don't need to be publically facing to the Internet.

Subnet VLAN Purpose
10.0.1.0/24 1 Network related infrastructure (dns server, router, switches, etc.)
10.0.2.0/28 1 WireGuard VPN clients tunneling into the network
10.0.3.0/24 1 Proxmox management port addresses
10.0.4.0/24 1 Static IP address assignments
10.0.5.0/24
10.0.6.0/23
1 DHCP IP assignments

DMZ (VLAN8)

DMZ - A DMZ for devices and services that are meant to be exposed to the Internet.

Subnet VLAN Purpose
10.0.8.0/24 8 DHCP IP assignments

WARP (VLAN9)

WARP - A network where all outbound traffic is routed through a WireGuard VPN to protect privacy.

Subnet VLAN Purpose
10.0.9.0/24 9 DHCP IP assignments