Journal
NetworkingDraft
Network Segmentation with pfSense and UniFi
Designing a segmented home-lab network with VLANs, firewall rules and sensible trust boundaries.
James Houlder1 min read
Draft. Design notes in progress.
Why segment?
Limiting blast radius, separating trust levels, and making traffic easier to reason about.
Planned VLAN layout
| VLAN | Purpose | Trust |
|---|---|---|
| 10 | Management | High |
| 20 | Trusted clients | Medium |
| 30 | IoT | Low |
| 40 | Guest | None |
Firewall rule philosophy
Default deny between segments, explicit allows, and logging where it matters.
Implementation
To be documented.
- #pfsense
- #unifi
- #vlan
- #firewall
Related articles
Open SourceDraft
DNS Daddy: Building an Open-Source Protective DNS Resolver
The thinking behind DNS Daddy — an open-source project exploring protective DNS and threat intelligence.
1 min
Labs & ExperimentsDraft
Building a Microsoft Sentinel Lab to Learn KQL
Setting up a small, cost-conscious Sentinel workspace to practise Kusto Query Language against real sign-in data.
1 min
Cloud EngineeringDraft
Microsoft Entra ID: Understanding Identity and Access Management
A practical primer on how Entra ID models users, groups, roles and access — written while learning it properly.
1 min