Networking

Decide when a wildcard certificate makes sense in a homelab, how DNS challenge changes the setup, and whether Caddy or Nginx Proxy Manager is the cleaner fit.

Replace port forwarding with Tailscale or Cloudflare Tunnel by choosing the right access model, testing the cutover, and removing old exposure safely.

Compare Headscale and Tailscale by control-plane ownership, maintenance, access control, and recovery responsibilities.

Choose between Tailscale, WireGuard, and Cloudflare Tunnel by separating private device access, self-managed VPN control, and selective public web-app exposure.

Use a simple homelab IP plan template to track VLANs, DHCP scopes, reservations, and static assignments before address sprawl makes changes risky.

Choose 2.5GbE, 10GbE, or a hybrid NAS upgrade path by matching network spend to storage throughput, cabling, heat, and multi-user workload reality.

Choose Cat6, Cat6A, or Cat8 by matching cable category to link length, 10GbE goals, PoE density, and how difficult the run will be to replace later.

Plan VLANs in a homelab by separating management, trusted clients, servers, and IoT or guest devices, then verifying trunks, access ports, DHCP scopes, and firewall policy one boundary at a time.

Learn how to set up homelab network segmentation with a practical five-zone VLAN model, IoT isolation, firewall rules, DNS, logging, and Proxmox and Docker placement guidance.

Compare OpenWrt vs OPNsense vs pfSense for a homelab, including routing, firewall features, hardware flexibility, management, and maintenance trade-offs.

Choose a homelab managed switch by balancing PoE budget, uplink path, controller model, and VLAN workflow across UniFi, MikroTik, and Omada.

Build homelab firewall rules by starting with a small zone model, blocking inter-VLAN traffic by default, then allowing only named paths for DNS, admin access, backups, monitoring, and published services.