• 2 Posts
  • 64 Comments
Joined 2 years ago
cake
Cake day: November 17th, 2022

help-circle

  • This. My first serious network upgrade was splitting out the router/firewall, Wifi, and switching to a Ubiquiti Edgerouter Lite, 8 port Netgear managed switch, and a Ubiquiti AP Pro.

    It ended up being around the price of a night hawk, but I had way better control over the firewall/NAT rules and it made future upgrades less painful as I could just target the switching vs WiFi for a change.

    As a side note, nearly all wifi routers that I’ve come across can act as just a access point. My current setup is using the Orbi mesh wifi system to get a decent signal to my attic bedroom.







  • I think that mitigation requires two things for it to work.

    1. You need to use a a Type 2 hypervisor (like Virtualbox, VMware Workstation/Fusion).
    2. That VM needs to be configured in NAT mode.

    The two primary ways you can configure a network for a local virtual machine are NAT and Bridged.

    Bridged mode places your VM effectively on the same network as your host OS, meaning that any DHCP server that exists on your network (rogue or otherwise) will give your virtual machine and IP.

    In NAT mode, the virtualization platform itself includes a DHCP server to dole out IPs, and handle the routing between your virtual machine and your host OS’s network.

    The thought process is that if you trust your laptop, the DHCP address handed out for NAT mode will not have the VPN breaking DHCP option and your VPN inside the VM will not have it’s route table screwed with.














  • At this point virtualization is legacy technology.

    Man, I’d love to believe that - and please Lemmy, prove me wrong, but virtualization, especially commercial products like VMware have one huge advantage over things like kubernetes - it’s effectively plug and play and has full support available.

    1. Boot off this esxi iso
    2. Deploy this VCSA OVA
    3. Have vCenter auto config VSAN
    4. Deploy fully ha/Drs managed VMs

    I would kill for a similar experience with kubes - something that I cannot for the life of me get to work in my homelab given the myriad of walkthrough in various states of accuracy.