My main switch is the Aruba S2500-48P (48x 1Gbps POE + 4x 10Gbps SFP+) and I use 2 Unifi UAP-AC-HD's for Wi-Fi (which I no longer recommend due to ongoing firmw

My main switch is the Aruba S2500-48P (48x 1Gbps POE + 4x 10Gbps SFP+) and I use 2 Unifi UAP-AC-HD's for Wi-Fi (which I no longer recommend due to ongoing firmware issues). For routing, I have a custom built desktop with a micro-ATX board which runs OpnSense. For things that "need" the performance (), I originally used a pair of Arista 7050TX's that I was kindly allowed to borrow from work. Unfortunately, these things were pulling 350W when idle and increased the temperature inside my rack by 15°F. They're also very significantly louder than a 2U Supermicro server. They're easily heard two rooms away due to the high-pitched fan noise. Nowadays, for things that need a link faster than 1Gbps, I just use a direct connection so I don't need power hungry switches. I have my storage server connected to the main Aruba switch with 2x 10Gbps SFP+ DACs and then connected it to my desktop with 100Gbps fiber (Mellanox ConnectX-4). The storage server just uses plain old Linux bridges to behave like a switch. Actual performance without any tuning is less than half of the line speed, but that's good enough for me since the SSD's are the bottleneck for file transfer now. For VLANs/subnets, I keep things relatively simple: 1 network for trusted things (no restrictions), 1 network for untrusted things (internet access only), 1 network for wireguard (access to trusted network only; no internet). Everything is dual-stack because I'm one of the crazy folks who love IPv6. () "Need" because I hate slow file copies over SMB :)