10
[Help] Should my NAS be on the management VLAN or the Services VLAN? (sh.itjust.works)
submitted 6 months ago by to c/selfhosted@lemmy.world
2 comments fedilink hide all child comments
 

Hello,

I am building a NAS to add to my homelab and I was wondering what is the best way to interface it to the rest of my services.

I have a beelink s12 mini pc as my server that runs proxmox, and I bought a Radxa Rock5C thats runs OpenMediaVault with a hat for 5 sata drives to act as a NAS.

I have a few VLAN to isolate different part of my network. Proxmox interface is accessible through the management VLAN (99) and the services it host have the Services VLAN (20) for the network. The Services VLAN is only accessible through a Wireguard interface and has access to internet.

So my question is as follows :

Should my new NAS be on the management VLAN (99) or on the Services VLAN (20)?

I was thinking of never allowing users to access the NAS directly and assign the space I need through NFS shares passed through the proxmox server as a mounted drive. That would isolate the NAS into the management VLAN and not expose it on the Services VLAN where the rules are looser. Is that a sensible thing to do?

Otherwise, what are my options to properly map the NAS?

Thanks

you are viewing a single comment's thread
view the rest of the comments
[–] [S] 1 point 6 months ago

it makes sense. My rationale behind putting the NAS on the MGMT and then passing disk space through mounted drives is that I can create any number of VLANs if I want, and give bits and pieces of the NAS drive through the services, without ever having to change my NAS configuration (other than creating the shares I need)

I wanted to just add more storage space to proxmox and distribute it through the services, but considering the prices of NVMe drives, the rock5c with the sata hat was a lot more cost effective since I had 2x 2TB SSD not doing much in my computer.

  • permalink
  • fedilink
  • source
  • parent