wow. Just dropped in a new home gateway (Devuan 3/Debian 11) - hardened Linux (Kicksecure/Whonix) - openrc (no systemd network vulnerabilities) - DMZ - NAT

wow. Just dropped in a new home gateway (Devuan 3/Debian 11) - hardened Linux (Kicksecure/Whonix) - openrc (no systemd network vulnerabilities) - DMZ - NAT + IPv6 - stealth/hidden master DNS server. - Shorewall firewall - Wireless, 4 SSIDs - Wireguard to remote VPS carrying DNS queries DMZ covers all IoT, Alexa, SmartTV, game console, cable TV; both by wireless and CAT5e. Household network covers laptop, desktop, cloud servers (Proxmox), Kerberos ticket server, file server (NFSv4, media DVR, ownCloud server. And my white lab is totally airgapped and occasionally waterfalled firewall as needed. I have a subnet that offers encrypted MAC.