Files

dtoro 543745cad9 network: retire Slate AX; add SODOLA switch migration plan and network topology doc

- infrastructure/network.md: permanent topology reference — VLAN 1 (main LAN)
  + VLAN 10 (homelab 192.168.8.0/24), Fritz!Box 7590 as VLAN router,
  SODOLA 5-Port 2.5Gbit as homelab switch
- plans/2026-06-01-slate-ax-to-sodola-migration.md: full migration runbook
  (pre-flight, Fritz!Box second-network config, SODOLA VLAN table, cutover
  procedure, verification commands). Gateway 192.168.8.1 is unchanged —
  no LXC/VM config edits needed. Fritz!Box DHCP for VLAN 10 hands out
  192.168.8.2 (Technitium CT 107) as DNS, closing the outstanding item in dns.md.
- plans/index.md: establishes plans/ convention (Planned → In Progress → Done)
- CONTRIBUTING.md: plan page template + linking discipline for plans

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-01 22:48:02 +02:00

3.0 KiB

Raw Blame History

Network

Physical and logical network topology for the homelab.

Why

The homelab runs on a dedicated subnet (192.168.8.0/24) isolated from the main household LAN (192.168.178.0/24). Isolation is enforced at the Fritz!Box level: homelab devices can reach the internet and main LAN can reach homelab services via explicit port forwards, but main LAN cannot initiate arbitrary connections into the homelab subnet.

Hardware

Device	Role
Fritz!Box 7590	Main router / ISP gateway, VLAN router between subnets
SODOLA 5-Port 2.5Gbit Managed	Homelab switch, all ports in VLAN 10

VLANs

VLAN	Subnet	Gateway	Devices
1 (native)	192.168.178.0/24	192.168.178.1	Household LAN — laptops, phones, APs
10	192.168.8.0/24	192.168.8.1	Homelab — Proxmox, all LXCs/VMs

Topology

ISP
 └── Fritz!Box 7590
      ├── VLAN 1  192.168.178.0/24  (main LAN)
      └── VLAN 10 192.168.8.0/24   (homelab)
           │
           └── SODOLA 5-Port 2.5Gbit
                ├── Port 1  uplink → Fritz!Box
                ├── Port 2  hubris (Proxmox, 192.168.8.77)
                ├── Port 3  [device]
                ├── Port 4  [device]
                └── Port 5  spare

DHCP

Fritz!Box serves DHCP for both VLANs. For VLAN 10 homelab:

Range: 192.168.8.100 – 192.168.8.240
DNS: 192.168.8.2 (Technitium on CT 107)

Most homelab hosts use static IPs below .100 — DHCP only assigns to new/transient devices.

DNS

Split-horizon DNS for *.hubris.network served by Technitium on CT 107 at 192.168.8.2:53. See dns.md for full detail.

Port forwarding

All inbound port forwards are on the Fritz!Box directly. The old double-hop (Fritz!Box → Slate AX → homelab) was eliminated when the Slate AX was retired. Target IPs are homelab addresses (192.168.8.x).

Remote access

NetBird mesh — primary path for remote administration. Authenticated via Authentik on the VPS.
Tailscale — legacy, being phased out. See mesh.md.

DNS — split-horizon config and entry list
Ingress — public entry points via VPS traefik
Mesh — NetBird / Tailscale VPN overlay
hosts/hubris.md — Proxmox host
CT 107 — dns — Technitium DNS server

Changelog

2026-06-01 — Slate AX retired; SODOLA switch added; Fritz!Box becomes homelab gateway

Replaced the GL.iNet Slate AX sub-router with the SODOLA 5-Port 2.5Gbit managed switch. Fritz!Box 7590 now routes VLAN 10 (192.168.8.0/24) directly — no more double-NAT. Gateway 192.168.8.1 is unchanged so no LXC or VM needed reconfiguration. Fritz!Box DHCP for VLAN 10 now hands out 192.168.8.2 (Technitium) as DNS, resolving the outstanding "update router DHCP DNS" item. See migration plan.

3.0 KiB Raw Blame History Unescape Escape