dtoro
543745cad9
- infrastructure/network.md: permanent topology reference — VLAN 1 (main LAN) + VLAN 10 (homelab 192.168.8.0/24), Fritz!Box 7590 as VLAN router, SODOLA 5-Port 2.5Gbit as homelab switch - plans/2026-06-01-slate-ax-to-sodola-migration.md: full migration runbook (pre-flight, Fritz!Box second-network config, SODOLA VLAN table, cutover procedure, verification commands). Gateway 192.168.8.1 is unchanged — no LXC/VM config edits needed. Fritz!Box DHCP for VLAN 10 hands out 192.168.8.2 (Technitium CT 107) as DNS, closing the outstanding item in dns.md. - plans/index.md: establishes plans/ convention (Planned → In Progress → Done) - CONTRIBUTING.md: plan page template + linking discipline for plans Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
72 lines
3.0 KiB
Markdown
72 lines
3.0 KiB
Markdown
# Network
|
||
|
||
Physical and logical network topology for the homelab.
|
||
|
||
## Why
|
||
|
||
The homelab runs on a dedicated subnet (`192.168.8.0/24`) isolated from the main household LAN (`192.168.178.0/24`). Isolation is enforced at the Fritz!Box level: homelab devices can reach the internet and main LAN can reach homelab services via explicit port forwards, but main LAN cannot initiate arbitrary connections into the homelab subnet.
|
||
|
||
## Hardware
|
||
|
||
| Device | Role |
|
||
|---|---|
|
||
| Fritz!Box 7590 | Main router / ISP gateway, VLAN router between subnets |
|
||
| SODOLA 5-Port 2.5Gbit Managed | Homelab switch, all ports in VLAN 10 |
|
||
|
||
## VLANs
|
||
|
||
| VLAN | Subnet | Gateway | Devices |
|
||
|---|---|---|---|
|
||
| 1 (native) | 192.168.178.0/24 | 192.168.178.1 | Household LAN — laptops, phones, APs |
|
||
| 10 | 192.168.8.0/24 | 192.168.8.1 | Homelab — Proxmox, all LXCs/VMs |
|
||
|
||
## Topology
|
||
|
||
```
|
||
ISP
|
||
└── Fritz!Box 7590
|
||
├── VLAN 1 192.168.178.0/24 (main LAN)
|
||
└── VLAN 10 192.168.8.0/24 (homelab)
|
||
│
|
||
└── SODOLA 5-Port 2.5Gbit
|
||
├── Port 1 uplink → Fritz!Box
|
||
├── Port 2 hubris (Proxmox, 192.168.8.77)
|
||
├── Port 3 [device]
|
||
├── Port 4 [device]
|
||
└── Port 5 spare
|
||
```
|
||
|
||
## DHCP
|
||
|
||
Fritz!Box serves DHCP for both VLANs. For VLAN 10 homelab:
|
||
- Range: `192.168.8.100 – 192.168.8.240`
|
||
- DNS: `192.168.8.2` (Technitium on [CT 107](../containers/107-dns.md))
|
||
|
||
Most homelab hosts use static IPs below `.100` — DHCP only assigns to new/transient devices.
|
||
|
||
## DNS
|
||
|
||
Split-horizon DNS for `*.hubris.network` served by Technitium on [CT 107](../containers/107-dns.md) at `192.168.8.2:53`. See [dns.md](dns.md) for full detail.
|
||
|
||
## Port forwarding
|
||
|
||
All inbound port forwards are on the Fritz!Box directly. The old double-hop (Fritz!Box → Slate AX → homelab) was eliminated when the Slate AX was retired. Target IPs are homelab addresses (`192.168.8.x`).
|
||
|
||
## Remote access
|
||
|
||
- **NetBird mesh** — primary path for remote administration. Authenticated via [Authentik on the VPS](../vps/).
|
||
- **Tailscale** — legacy, being phased out. See [mesh.md](mesh.md).
|
||
|
||
## Related
|
||
|
||
- [DNS](dns.md) — split-horizon config and entry list
|
||
- [Ingress](ingress.md) — public entry points via VPS traefik
|
||
- [Mesh](mesh.md) — NetBird / Tailscale VPN overlay
|
||
- [hosts/hubris.md](../hosts/hubris.md) — Proxmox host
|
||
- [CT 107 — dns](../containers/107-dns.md) — Technitium DNS server
|
||
|
||
## Changelog
|
||
|
||
### 2026-06-01 — Slate AX retired; SODOLA switch added; Fritz!Box becomes homelab gateway
|
||
Replaced the GL.iNet Slate AX sub-router with the SODOLA 5-Port 2.5Gbit managed switch. Fritz!Box 7590 now routes VLAN 10 (`192.168.8.0/24`) directly — no more double-NAT. Gateway `192.168.8.1` is unchanged so no LXC or VM needed reconfiguration. Fritz!Box DHCP for VLAN 10 now hands out `192.168.8.2` (Technitium) as DNS, resolving the outstanding "update router DHCP DNS" item. See [migration plan](../plans/2026-06-01-slate-ax-to-sodola-migration.md).
|