4 ms·
Books are good, but don’t underestimate the power of overcomplicated home networking as a teaching project. Pick up some gear and VLAN your network so all the I
by teeray 3y ago
Books are good, but don’t underestimate the power of overcomplicated home networking as a teaching project. Pick up some gear and VLAN your network so all the IoT stuff is on its own network away from your protected devices (also make it so IoT devices can only talk to the WAN). Set up a guest network. Make it so you and guests can stream to your streaming devices but guests can’t ping your protected devices (this one is a whoooole thing involving MDNS and reflectors). Set up a site-to-site Wireguard VPN with a cloud VNet (try it without using Tailscale first). Set up a Pi-Hole, then DNAT all DNS traffic to it. Come up with a fun naming scheme for your machines (mine are all ships from The Expanse). Set up DNS nicely so you never have to remember IPs. Anyway, those are just some ideas that come to mind.
- scubbo 3y agoHaving done almost all of these - I still feel like I know about 2% of how networking actually works :laugh: VPCs are just so unnecessarily complicated!
- dml2135 3y agoHa this is me right now. I’ve got the VLAN segmentation down, but now getting casting and airplay working across VLANs with mDNS has me a bit stumped. Definitely a bit tricker than I anticipated, I thought I’d just need to write firewall rules. For me everything is named after things from Dune :)
- ta1243 3y agomdns is a right pain as it uses the range for local subnet only, and has a TTL of 1, so you can't just pim route it round your network like normal multicast. You need a device which will reflect messages between all the different vlans -- avahi-daemon is popular
- 0xBDB 3y agoThis is a good list. To make it more modern (i.e., software defined or infrastructure as code or whatever buzzword is current) you could then do it all in Terraform, Ansible, etc. on a Proxmox / PFSense / VMWare home lab. Maybe even add GitOps - e.g. install a GitHub Actions agent locally and have it run the Terraform etc. against your lab servers automatically when you commit it.
- DANmode 3y agoWeren't people calling this "serverless" until 6 months ago?
- richrichardsson 3y agoThis is something I'd love to do, but haven't a clue where to start researching the topics.
- lanstin 3y agoI still remember the IPs for the DNS servers at a place I worked at in the 1990s. If you don’t end up remembering IPs at least for a while you aren’t really getting your hands dirty. But yeah all those seem like good learning opportunities. If you don’t actually need email that much, running your own mail servers and DNS servers is also good, altho in the modern day some large providers will probably regard your outgoing mail as spam. (E.g. I can’t email my wife on ATT.net, and from time to time I have been blocked by gmail and office 365).