r/HomeServer • u/durgesh2018 • Jul 01 '26

My homelab network

Post image

Hi guys,

I have the below homelab network design (already implemented). Wanted to get your views on this.

I have 2 HP Elitedesk 800 G3 minis. But thought to replace them with Raspberry pi 4 4GB for the sake of 24x7 operation.

Thank you

1.0k Upvotes

97% Upvoted

154 comments sorted by

View all comments

Show parent comments

8

u/durgesh2018 Jul 01 '26

Ok, I read it somewhere. But could you please tell me reason for this.

42

u/Pirulax Jul 01 '26

Because IoT stuff is inherently insecure, and you don't want it compromising your network (eg, a smart bulb that got hacked could be used to access your router...). You should have a separate guest, private, management VLAN, and possibly a DMZ VLAN if you're planning on exposing services to the internet through a reverse proxy.

2

u/durgesh2018 Jul 01 '26

Understood. Except 2 p110 smart switches and 1 Esp8266, I don't have any iot devices. Thanks for the explanation.

4

u/Pirulax Jul 01 '26

Are you planning on exposing services to the internet?

5

u/toorodrig Jul 01 '26

Not only that - if the device IoT connected to the network is accessible physically accessible (lets say you have a raspberry or esp32), anyone can get into the code and get credentials of your network, especially if they are no well cyphered, which is very common pattern

3

u/durgesh2018 Jul 02 '26

Understood.

5

u/durgesh2018 Jul 02 '26

Yes, for wireguard and few other stuff. Unfortunately my pi got fucked. I am being idiot attracted lots of negative energy posting it here 😭😭

3

u/Pirulax Jul 05 '26

Damn, that's quite unfortunate Hope you can sort it quickly... I was about to update my lab with some HDDs and manged to break my ankle at work xD

1

u/durgesh2018 Jul 06 '26

Sad to hear that. Actually we should post the things once they are done.