40 lines
928 B
Markdown
40 lines
928 B
Markdown
---
|
|
title: Netzwerk-Architektur
|
|
category: concepts
|
|
tags: [networking, ip-addressing, subnets, vlan]
|
|
created: "2026-04-28"
|
|
modified: "2026-07-24"
|
|
---
|
|
|
|
# Netzwerk-Architektur
|
|
|
|
## IP-Adressierung (10.0.X.Y)
|
|
- 10.0.10.x = Gateway
|
|
- 10.0.20.x = Hypervisoren (Proxmox Cluster, 9 Nodes)
|
|
- 10.0.30.x = Container/VMs (Services)
|
|
- 10.0.40.x = Clients
|
|
- 10.0.50.x = Smart Home (26 hosts)
|
|
- 10.0.60.x = DMZ/Reverse Proxies
|
|
|
|
## VLAN-Struktur
|
|
- Jedes Segment hat eigenes VLAN
|
|
- Proxmox Bridge-Konfiguration (vmbr0)
|
|
- Inter-Segment-Kommunikation via Gateway
|
|
|
|
## TLS-Zertifikate
|
|
- Alle Zertifikate haben kein CN
|
|
- Self-signed oder SAN-only
|
|
- Keine reverse-DNS Einträge
|
|
|
|
## Wichtige Ports
|
|
Siehe [[reference/ports]] für vollständige Liste.
|
|
|
|
## DNS
|
|
- externe Domains: familie-schoen.com, schoen.codes, essen.schoen.eu
|
|
- interne Auflösung über K8s CoreDNS
|
|
|
|
## Related
|
|
- [[reference/ip-map]]
|
|
- [[reference/ports]]
|
|
- [[systems/proxmox-cluster]]
|