{"id":123,"date":"2022-05-08T19:59:19","date_gmt":"2022-05-08T19:59:19","guid":{"rendered":"https:\/\/haithamaleryani.com\/?page_id=123"},"modified":"2022-12-28T21:58:58","modified_gmt":"2022-12-28T21:58:58","slug":"home-lab","status":"publish","type":"page","link":"https:\/\/haithamaleryani.com\/index.php\/home-lab\/","title":{"rendered":"My Home Lab"},"content":{"rendered":"\n<p>In my spare time I thoroughly enjoy expanding my knowledge of opensource and self hosted systems\/solutions which keeps me in touch with current tech trends.<\/p>\n\n\n\n<p>I run\/have a highly virtualized and containerized home lab environment using both Linux and Windows solutions.<\/p>\n\n\n\n<p><strong>LINUX<\/strong><\/p>\n\n\n\n<div class=\"wp-block-accordion-toggle-accordion-toggle\"><div class=\"eb-parent-wrapper eb-parent-eb-accordion-aazaggc \"><div class=\"eb-accordion-container eb-accordion-aazaggc\" data-accordion-type=\"accordion\" data-tab-icon=\"fas fa-angle-right\" data-expanded-icon=\"fas fa-angle-down\"><div class=\"eb-accordion-inner\"><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Virtual Firewall Solution &#8211; pfSense<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Although I use a physical firewall to protect my LAN from the dangers of the WAN. For scenarios where I have several VLANs running off of one port on the physical firewall I like to also have one machine on every one of those VLANS run pfSense for added security.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">IDS Solution &#8211; Security Onion<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">pfSense is an amazing firewall but unfortunately it relies on third part software like snort (which does not provide the best end-user experience) for intrusion detection. I therefore started using Security Onion which has quickly become my go to intrusion detection system to run along pfSense. <\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Honypot Solution &#8211; T-Pot<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">I run T-Pot to give me insight into who is scaning my network from the WAN side and more importantly get some peace of mind if anyone has breached the firewall.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">DNS Solution &#8211; Pi-Hole<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Ads and Popups are a pretty popular vector for malware delivery. Pi-Hole is my DNS solution that allows me to block ads and harmful popups before users on my network reach the site.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Virtualization Solution &#8211; Proxmox<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Virtualization is integral part of any modern network environment. For my Linux environment I use ProxMox a Debian based virtualization solution that offers great management benefits when running Linux VMs.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Containerizing Solution &#8211; Rancher\/Kubernetes\/Docker<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Rancher, Kubernetes, and Docker is what I use to deploy and scale up\/down all my Linux based applications.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Dashboard Solution &#8211; Heimdall<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Heimdall allows me to have a centralized dashboard to manage all my Linux and Windows based applications.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Knowledge base Solution &#8211; Bookstack<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">One of the solutions I have used in both personal and professional environments. Bookstack is an awesome application that allowed me to seamlessly and securely exchange knowledge and more importantly create a more company specific web based &#8220;search engine&#8221; I can direct employees to for answers to their departments top FAQs.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Monitoring Solution &#8211; Uptime Kuma<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Asides from being open-source and free UptimeKuma integrates with several popular communication tools like slack to help notify the appropriate parties once an user defined event is trigger (ping failure etc).<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Logging Solution &#8211; Grafana<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Logging is an essential part of system administration and Grafana is what I use to make sure that my systems are working optimally.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Storage Solution &#8211; Truenas Core<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">TrueNAS core (previously FreeNAS) is my lab NAS solution which allows me to implement technologies such as RAID and share data through SMB and NFS.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Cloud Data Sharing Solution &#8211; NextCloud<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Similar to OneDrive and GoogleDrive NextCloud is a great way to self host cloud data sharing.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">VoIP Solution &#8211; 3CX hosted on AWS<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">3CX is a great VoIP solution which integrates with AWS chime and EC2 to offer incredibly affordable VoIP solutions (I have deployed this in professional environments where the phone bill averaged $1 a month for a toll free number and six office extensions)<\/p><\/div><\/div><\/div><\/div><\/div><\/div>\n\n\n\n<p><strong>WINDOWS<\/strong><\/p>\n\n\n\n<p>Windows is the go to OS for productivity and is what I personally like to use on my main machine. With that being said any home lab would not be complete without running Windows Servers. My next goal for my windows domain is to run an exchange server and integrate some 2FA abilities with AD using DUO.<\/p>\n\n\n\n<div class=\"wp-block-accordion-toggle-accordion-toggle\"><div class=\"eb-parent-wrapper eb-parent-eb-accordion-lhzcblx \"><div class=\"eb-accordion-container eb-accordion-lhzcblx\" data-accordion-type=\"accordion\" data-tab-icon=\"fas fa-angle-right\" data-expanded-icon=\"fas fa-angle-down\"><div class=\"eb-accordion-inner\"><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Virtualization Solution &#8211; Hyper-V &amp; Esxi<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Both Hyper-V and Esxi are widely used in professional environments and being familiar with these hypervisors is necessary when trying to run efficient virtual environments. Using Hyper-V also has the added benefit of providing system administrator with added management features when managing Windows VMs.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">File Sharing Solution &#8211; DFS<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">Distributed File System or DFS is windows solutions for sharing data while providing fail-overs and redundancy.<\/p><\/div><\/div><div class=\"eb-accordion-wrapper\" data-clickable=\"false\"><div class=\"eb-accordion-title-wrapper\"><span class=\"eb-accordion-icon-wrapper\"><span class=\"fas fa-angle-right eb-accordion-icon\"><\/span><\/span><h3 class=\"eb-accordion-title\">Domain Solution &#8211; Active Directory Domain Services<\/h3><\/div><div class=\"eb-accordion-content-wrapper\"><p class=\"eb-accordion-content\">AD DS is most likely the top used Windows Server feature and in my environment I use it to test GPO deployments and manage users accounts for family members.<\/p><\/div><\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"<p>In my spare time I thoroughly enjoy expanding my knowledge of opensource and self hosted systems\/solutions which keeps me in touch with current tech trends. I run\/have a highly virtualized and containerized home lab environment using both Linux and Windows solutions. LINUX WINDOWS Windows is the go to OS for productivity and is what I &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/haithamaleryani.com\/index.php\/home-lab\/\"> <span class=\"screen-reader-text\">My Home Lab<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_eb_attr":"","om_disable_all_campaigns":false,"_mi_skip_tracking":false,"site-sidebar-layout":"default","site-content-layout":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":""},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/haithamaleryani.com\/index.php\/wp-json\/wp\/v2\/pages\/123"}],"collection":[{"href":"https:\/\/haithamaleryani.com\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/haithamaleryani.com\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/haithamaleryani.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/haithamaleryani.com\/index.php\/wp-json\/wp\/v2\/comments?post=123"}],"version-history":[{"count":35,"href":"https:\/\/haithamaleryani.com\/index.php\/wp-json\/wp\/v2\/pages\/123\/revisions"}],"predecessor-version":[{"id":289,"href":"https:\/\/haithamaleryani.com\/index.php\/wp-json\/wp\/v2\/pages\/123\/revisions\/289"}],"wp:attachment":[{"href":"https:\/\/haithamaleryani.com\/index.php\/wp-json\/wp\/v2\/media?parent=123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}