Segmented Proxmox Homelab

Mon, 01 Jan 0001 00:00:00 +0000

One Proxmox host runs workloads at different trust levels: development, internal services, public-facing services, and a security lab for malware and offensive tooling. Each is isolated in its own network segment behind a firewall, with no path between segments except by explicit rule.

Network segmentation

The firewall is an OPNsense VM. The host has a single NIC and the router has no VLANs, so each segment is a Linux bridge with no uplink, attached only to OPNsense, which routes and filters between them.

Projects on Rylan Puderbaugh

Segmented Proxmox Homelab

Network segmentation