Proficient
Networking
VLANs, firewalls, routing, and mesh VPN — the homelab layer most developers treat as magic, treated as engineering.
Proficiency
3+yrs
Major concepts
Concepts · 04
01 / 04
Segmentation & firewalling
VLANs and firewall rules on OPNsense to separate trusted devices, lab gear, and IoT — keeping a chatty smart plug away from everything that matters.
01Segmentation & firewalling
VLANs and firewall rules on OPNsense to separate trusted devices, lab gear, and IoT — keeping a chatty smart plug away from everything that matters.
02Routing & switching
Managed switches with VLAN tagging, QoS, and link aggregation; static and policy routing to send traffic where it should go.
03Zero-trust remote access
Tailscale mesh VPN for remote access with no open WAN ports — reach the lab from anywhere without exposing it to everyone.
04Edge services
Traefik and local DNS handling ingress, TLS, and service discovery across the network.
Advantages · 04
Core advantages
- Network fundamentals make cloud (VPC, subnets, security groups) decisions obvious
- Proper segmentation contains incidents to where they start
- Tailscale removes the need to ever port-forward
- Understanding L3/L4 cuts through 'it's probably DNS' guesswork
Highlights · 03
Work highlights
- Run a VLAN-segmented home network on OPNsense with default-deny policy
- Use Tailscale for remote access with zero open WAN ports
- Configured managed switches for VLAN, QoS, and link aggregation
Skills · 06
Competencies
- VLANs & 802.1Q
- OPNsense firewalling
- Routing & switching
- Tailscale mesh VPN
- Traefik / DNS
- AWS VPC basics