[Help] Should my NAS be on the management VLAN or the Services VLAN?
from Croquette@sh.itjust.works to selfhosted@lemmy.world on 29 Apr 16:00
https://sh.itjust.works/post/59340110

Hello,

I am building a NAS to add to my homelab and I was wondering what is the best way to interface it to the rest of my services.

I have a beelink s12 mini pc as my server that runs proxmox, and I bought a Radxa Rock5C thats runs OpenMediaVault with a hat for 5 sata drives to act as a NAS.

I have a few VLAN to isolate different part of my network. Proxmox interface is accessible through the management VLAN (99) and the services it host have the Services VLAN (20) for the network. The Services VLAN is only accessible through a Wireguard interface and has access to internet.

So my question is as follows :

Should my new NAS be on the management VLAN (99) or on the Services VLAN (20)?

I was thinking of never allowing users to access the NAS directly and assign the space I need through NFS shares passed through the proxmox server as a mounted drive. That would isolate the NAS into the management VLAN and not expose it on the Services VLAN where the rules are looser. Is that a sensible thing to do?

Otherwise, what are my options to properly map the NAS?

Thanks

#selfhosted

threaded - newest

neidu3@sh.itjust.works on 29 Apr 16:37 collapse

This mostly comes down to your preferences, but my rule of thumb is that everything should be on mgmt vlan for mgmt, and then you choose which of those to expose to other VLANs via secondary interfaces. This has the benefit of allowing configuration when you’re on the management vlan only, and limiting access to the service itself.

Croquette@sh.itjust.works on 29 Apr 17:49 collapse

it makes sense. My rationale behind putting the NAS on the MGMT and then passing disk space through mounted drives is that I can create any number of VLANs if I want, and give bits and pieces of the NAS drive through the services, without ever having to change my NAS configuration (other than creating the shares I need)

I wanted to just add more storage space to proxmox and distribute it through the services, but considering the prices of NVMe drives, the rock5c with the sata hat was a lot more cost effective since I had 2x 2TB SSD not doing much in my computer.