System Architecture

A production-grade homelab featuring a three-node Proxmox cluster with dual-layer virtualization, VLAN-segmented networking, and external domain integration through wentling.net.

External Access

wentling.net domain hosted on Cloudflare routes external traffic to homelab services

Edge Security

EdgeRouter 4 handles firewall rules, VLAN management, and traffic routing

Compute Layer

Three-node Proxmox cluster providing high availability and load distribution

Applications

Services running in Proxmox VMs and Talos Kubernetes pods

Physical Infrastructure

Network Foundation

EdgeRouter 4 Ubiquiti EdgeRouter 4

Primary router handling edge security, VLAN routing, and firewall rules for network segmentation

UniFi Access Point UniFi Access Point

VLAN-aware wireless coverage providing segregated network access across all device categories

Proxmox Cluster

Custom PC

Custom PC

Primary Node
  • High-performance compute workloads
  • Kubernetes control plane hosting
  • Primary VM orchestration
  • Development environment hosting
HP Z2 Workstation

HP Z2 Workstation

Storage Node
  • Dedicated file server hosting
  • High-capacity storage backend
  • Secondary compute resources
  • Backup and archival services
Raspberry Pi 5

Raspberry Pi 5

ARM Node
  • ARM-based workload testing
  • Low-power efficiency node
  • Cluster quorum and failover
  • IoT service gateway

Network Segmentation

Four isolated VLANs with custom firewall rules providing security boundaries and traffic management

Personal VLAN

Primary workstation, development machines, and personal devices with full network access

Roommates VLAN

Isolated network segment for shared living space devices with internet-only access

IoT VLAN

Smart home devices, sensors, and IoT endpoints with restricted network communication

Network VLAN

Infrastructure services, switches, access points, and network management tools

Service Architecture

Dual-layer virtualization: Infrastructure services in Proxmox VMs, modern cloud-native applications in Kubernetes

Proxmox Proxmox Virtual Machines

Core Infrastructure

UniFi UniFi Controller Caddy Caddy Reverse Proxy Technitium Technitium DNS File Server

Applications & Tools

Home Assistant Home Assistant Klipper Klipper (3D Printer) Obico Obico (Print Monitor) Uptime Kuma Uptime Kuma

Talos Talos Kubernetes Cluster

Platform Services

ArgoCD ArgoCD (GitOps) Nginx Nginx Ingress Longhorn Longhorn Storage Nginx Nginx Web Server

Monitoring & Applications

Grafana Grafana Prometheus Prometheus Actual Budget Actual Budget

External Domain Integration

wentling.net

Primary domain hosted on Cloudflare with DNS management and CDN services

Reverse Proxies

Caddy handles SSL and routing for Proxmox VMs, while Nginx Ingress manages Kubernetes services

Service Routing

Intelligent routing to Proxmox VMs or Kubernetes ingress controllers

Key Technologies

Talos Linux

Immutable, secure Kubernetes operating system providing enterprise-grade container orchestration

GitOps with ArgoCD

Declarative continuous deployment enabling infrastructure and application management through Git

VLAN Security

Network micro-segmentation with custom firewall rules providing defense-in-depth security

Full Observability

Comprehensive monitoring with Prometheus, Grafana, and Uptime Kuma across all infrastructure layers