• 11 Posts
  • 1.82K Comments
Joined 1 year ago
cake
Cake day: July 7th, 2023

help-circle













  • Not saying physical switches are needed for security, which is why I was asking for clarification. Doing all of this on a router doesn’t make sense without a physical separation though. That’s my point. If the router gets owned, they have access to all networks anyway. If the idea is just for traffic direction and shaping, then I’m confused why the bridged pihole.


  • just_another_person@lemmy.worldtoSelfhosted@lemmy.worldVLAN usage under Proxmox
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    2
    ·
    edit-2
    12 hours ago

    I don’t think there is anything wildly wrong with it, but it seems like you’re doing all of this at the router, unless you have dedicated switches for each VLAN?

    VLAN is not a security feature, it’s a logical separation of IP segments. Maybe I’m missing your intention here, but just setting different IP spaces on VLANs and then bridging them doesn’t help your security, it just complicates your network.


  • You may want to check your specs again. The Ryzen APUs are very power efficient and run the same stretch as M3 (reported): 15W-45W

    Though the more realistic at the wall measurements of the 2023 Mac Minis pretty much seem to have it pegged at a solid 15W-25W min under normal service workloads. The reported “idle” measurements of the M* chips being at 6W are literally just saying “if it has power”, and unrealistic considering you can’t even run them without a the GPU being engaged somewhat without a fully headless software configuration.





  • Well the services would have to speak the same event or messaging system, whatever it may be. Then you’d just need to bridge the networks of the containers, or have them speak to endpoints in each side.

    There is no universal messaging system between all pieces of software though. Maybe figure out what you’re sending to first, then work back from there. There’s nothing blocking you from sending data between two containers in a variety of ways though.