Embedded Files
In April 2023, I made a crucial decision to transition from VMware ESXi to Proxmox as my primary hypervisor. This shift was prompted by the incompatibility of my workstation hardware with newer versions of VMware ESXi, which posed significant security risks to my homelab environment.
To address this challenge, I migrated my entire setup to Proxmox, a powerful open-source hypervisor. This transition not only ensured compatibility with my hardware but also enhanced the overall security and stability of my homelab infrastructure.
Hardware: Dell T7600 Workstation with 2x E5-2680's 32GB RAM and access to 38TB of storage (2 separate RAID enclosures. One 8TB in RAID 5 and the other 30TB in RAID 0).
For the past six years, I have been utilizing this setup as a reliable foundation for my computing needs. Prior to the current configuration, I had another workstation with dual e5-2670 processors, which served me well for about five years.
Over time, I have made several hardware upgrades to optimize performance based on my evolving requirements. These upgrades include the addition of SSDs, USB 3.0 ports via a PCIe card, and ECC RAM. Furthermore, to safeguard against power outages, the server is connected to an uninterruptible power supply (UPS), which has proven invaluable on numerous occasions.
As part of my gradual expansion and improvement process, I have incorporated two RAID enclosures into my infrastructure. The first enclosure, configured in RAID 5, provides me with 8TB of reliable storage, while the second enclosure, in RAID 0, offers 30TB of space. Although these enclosures are temporary solutions resulting from my incremental upgrades, I have found them to be highly effective in storing my files while I plan to build a dedicated server with direct internal drive connections.
At present, my server is running a selection of virtual machines (VMs) that serve various purposes. I have two Windows 10 machines, one dedicated to media server functionalities and other services, while the other is hosting a WordPress website for testing and development.
Additionally, I have implemented a Kemp Load Balancer VM, which I am using as a reverse proxy for internal services. This Load Balancer has proven to be an excellent tool for enhancing security and accessibility. By leveraging the Kemp Load Balancer, I have successfully configured a Virtual IP (VIP) to securely access all my applications from outside my network, with the convenience of only needing to open a single port. I am continually expanding my knowledge and familiarity with the Load Balancer, uncovering its extensive capabilities, and eagerly anticipating the opportunity to apply my newfound expertise to future projects.
As an avid learner, I am constantly seeking new challenges and avenues for growth, and I eagerly look forward to pursuing further projects and expanding my skills based on the knowledge I acquire.
February 2023 Update
Nothing much has changed hardware wise other than using an old Intel NUC as a "Jump Box/Host" to access internal services on my network including VM's.
I chose this setup so I can access my home server to continue learning Linux administration while away from home. I recently passed the CompTIA Security + and am currently studying for a Linux cert. I have VM's running Red Hat Enterprise Linux (RHEL), Rocky Linux, and Ubuntu on both my home server and laptop for "on the go" learning as well.
April 2023 Update
Concerned about the security issues associated with the version of ESXi running on my workstation, I searched for more secure alternatives. After researching and studying informative documentation and videos highlighting its features, I made the decision to switch to Proxmox.
Initially, my plan was to migrate my existing virtual machines from ESXi to Proxmox. However, considering the security concerns and my desire for a fresh start, I opted to rebuild the entire setup.
For the rebuild, I leveraged Docker Compose on Ubuntu Server, embracing a containerized approach for improved reliability, customization, and a robust learning environment for mastering Linux deployment, security, and maintenance.
The new setup proved to be a significant upgrade, offering numerous added features and benefits. Notably, I integrated Traefik reverse proxy, which ensured secure access to my applications from outside my network. This added layer of protection facilitated controlled and encrypted communication between external users and the server.
To further enhance the security posture, I implemented Crowdsec—an open-source Intrusion Prevention System (IPS). Leveraging the combined power of Crowdsec, Traefik, and Cloudflare bouncers, I fortified the Ubuntu Server and safeguarded the internal applications running on it. This comprehensive security framework provided proactive defense against potential attacks and intrusions.
Overall, the migration to Proxmox, the adoption of Docker-based infrastructure, and the implementation of advanced security measures marked a significant leap forward. The project not only established a more secure and robust environment but also served as a valuable learning experience for mastering Linux administration, containerization, and deploying cutting-edge security solutions.
Page updated
Report abuse