I started my home lab several years ago over a shelf with a very old PC (AMD350 with dual core), a Mikrotik RB2011, an 8 Port Cisco Meraki Switch and couple Meraki WAPs (MR33 and MR18).
ย
My home lab has evolved to an open 6U Rack using shelf and couple years ago I step up my game with full 20U Rack enclosed).ย My next goal is to pursue a 42U but I need to move to a different house to get proper space so I have space constrains!
ย
Now This is the current layout of my rack:
- Outside of the rack I have one Juniper Mist AP41 Access Point.
- Inside in the top of the rack I have my ISP fiber modem (a Huwaei modem) in bridge mode.
- In the following U I have a Mikrotik RB5009 that is my main Internet Edge Router.ย I do VPNs, Firewall, etc.
- The uplink of the Mikrotik RB5009 goes to my ISP's fiber modem and the Downlink goes to my Layer 2 IPS / AMP solution (Cisco Meraki MX65 configured in Bridge Mode)
- The Meraki MX65 listens passively and applies IPS and AMP rules for anything leaving or anything my internal LAN.ย If the Meraki 65 is down I have my RB5009 to bypass via another ethernet link back to my both CRS317 using bond interfaces (active / standby).
- Downstream to the Meraki MX65 I have a pair of Mikrotik CRS317 acting as my Layer 3 Core Switches.ย These switches has 16 ports x 10 Gbps SFP+.ย Even Mikrotik doesn't support or has VSS for High Availability I have created some scripts to simulate this behavior (Basically I have a primary switch and the second one is in standby mode with all the interfaces down except the heartbeat one and monitors the primary switch constantly (every second).ย If the connection is lost the secondary switch enables all the SFP+ ports and has almost the same configuration of the primary switch (which is replicated from the primary switch every night to keep the configurations in sync between the 2 switches).
- Below the 2 core switches I have a Mikrotik CRS26 which was my old core switch but now I use it as a Server Access switch.ย All my 1 Gbps connections (Ethernet RJ45) are connected there.ย From this switch I have 1 SFP+ uplink to each of my Mikrotik CRS317 to get High availability on my core.
-ย Below my CRS326 I have a 24 keystone patch panel to connect all the nodes in my rack and the access points from the rest of the house (Also Juniper Mist AP41)
- In the next level I have a shelf with Raspberry Pi 4 running Pi-KVM (v2 DIY) that allows me manage my servers that doesn't have an IPMI interface.
- In the same shelf I have a Juniper EX2300-C switch that has PoE+ capabilities to energize my WAPs (And future cameras)
- In the next shelf I have 2 mini PCs (HP elitedesk mini 800-G2) with 24 and 32 GB of RAM, 512 GB NVMe for boot drive (for my working nodes Proxmox cluster) and 1 TB SSD for my VMs storage using ZFS.ย This mini PCs have a single link to my CRS326 but I am planning to add USB Ethernet adapater and RJ45 media converters of 1 Gbps to have dual uplinks to my core switches
- I also have an old QNAP NAS (2 Bay with an Celeron CPU and 16 GB of RAM).ย This NAS is the main storage of my home network for my personal files, work files, photos, games, movies, etc.ย I am planning to decommission my NAS to a larger server (Bottom of the rack)
- The server with 4 HDDs was my first server build and runs a Chinese X99 MATX motherboard with a Xeon E5-2650Lv3 CPU (12 cores / 24 threads) and 128 GB DDR4 Memory.ย I recently upgraded the server with a dual 25/10 Gbps Mellanox Connect-X4 NICs with 1 link going to each of my core switches (CRS317). This server is also running Proxmox as part of my cluster.
- The bottom server with 8 bays is my recent addition with a Supermicro X11SPM-TF with a Xeon Golden 6118 with 20 cores and 40 threats and 128 GB of RAM with also a Melanox Connect-X4.ย This server is also running Proxmox as part of my cluster
ย
Most of the Hardware I bought it 2nd hand or got it for free doing training certifications (like the Juniper and Meraki)
ย
What I am running in my Homelab?
- Proxmox as hypervisor for all my servers.
- 2 x TrueNAS Scale in a VMs with HDD passthruย in my 2 large servers so I have high availability of my data (and sunset my old QNAP).
- Couple windows VMs for testing configurations.
- Dashy Dashboard (planning to replace it with Dashboard).
- Netbox for DCIM and IPAM
- NUT Server for UPS Monitoring (and self shutdown in case of power outage)
- Syncthing for Storage and data replication between servers and workstations.
- NetData for monitoring
- Zabbix and CheckMK (testing both now to select one for my infrastructure monitoring)
- AdGuard for DNS Server
- Apache Guacamole and NextTerm as Jump Servers
- CrowdSec to push 30K block IPs to my RB5009 as an extra layer of IPS security (in top of the Meraki MX65)
- Portainer for all my containers' management
- Jellyfin and Plex for all my local Stream media
- Home Assistant for Home Automations.
- Greenbone OpenVAS for Vulnerability Scanning.
ย
What are my next steps? Continue my journey to have high availability almost everywhere.
- I want to replace my EliteDesk mini-PCs with more new ones (lower power consumption and higher speed).ย Winning this award will help me on my next upgrade.
- I want to decommission my old X99 server and replace it with another Xeon Golden 6118 to be the backup of the current one.ย I want to run in each server Proxmox and TrueNAS Scale in a VM with real time data replication and automatic failover (via custom scripts that I am planning to develop)
- I want to decommission my Meraki MX65 that is capping my BW inspection to 250 Mbps but now I have more than that.ย I want to replace it with a mini PC that has 4 x SFP+ and few 2.5 Gbps running Proxmox and few VMs (OpenSense with ZenArmor in Layer 2, Ubuntu VM / LXC to have a netinstall server to remotely reformat and reinstall any of my core switches remotely if needed without the need to move cables)
- I want to replace my Mist WAPs that are end of support and license with either Unifi APs (WiFi 7) or Omada (EAP773).ย I like more the Unifi ecosystem but I see Omada with more hardware capabilities (10 Gbps links)
- I want to replace my Juniper switch to support mGig ports.ย Probably a Catalyst 3650 or 3850 with UPOE for all my access needs (Cameras, and WAPs).ย My main concern is power consumption but Unifi or TP-Link options are too expensive or doesn't have all the features that I am looking for.
What I like of my home lab is that allow me to keep myself sharp on technical skills and test new things the way I wanted.
ย