Networking

Every homelab guide eventually tells you to “get a managed switch,” usually without saying why, or which one, or what happens if you buy the wrong one. This site has already covered when 10GbE is worth the upgrade and how to configure VLANs, bridges, and bonding once you’re inside Proxmox. This article is the piece that comes before both of those: picking the actual switch hardware sitting between your gear, the decision that either makes everything downstream easy or makes you fight your network for the next three years. ...

At some point every homelab operator wants to reach their stuff from outside the house, checking on a download, pulling up Jellyfin at a friend’s, hitting the Proxmox web UI from a coffee shop. The wrong way to do this is punching holes in your router’s firewall and forwarding ports straight to internal services. The right way is a VPN that puts your remote device on the same private network as your homelab, so nothing is exposed to the internet at all. WireGuard, Tailscale, and ZeroTier are the three tools homelabbers reach for most, and they’re not really three competing options for the same job, they’re two different approaches with WireGuard sitting underneath one of them. ...

Browser extensions block ads on the device they’re installed on. A phone that isn’t running one, a smart TV, a game console, a guest’s laptop on your Wi-Fi, none of that gets covered. Network-level DNS blocking fixes that by sitting between every device on your network and the internet, and refusing to resolve requests to known ad and tracker domains before they ever load. It’s one of the easiest wins in self-hosting: low resource cost, immediate and visible results, and it protects every device on the network without touching a single one of them individually. Pi-hole and AdGuard Home are the two dominant tools for doing this yourself, and picking between them comes down to a handful of real differences, not just branding. ...

Proxmox sets up a single bridge during install, vmbr0, hands every VM and container a virtual NIC on it, and most homelabs never touch networking again after that. That’s fine right up until you want to keep your NAS traffic off the same broadcast domain as a VM you don’t fully trust, or you add a second NIC and aren’t sure whether to bond it or split it out, or you’re staring at a VLAN dropdown in the VM hardware tab with no idea what happens if you fill it in wrong. None of this is complicated once you see the shape of it, but Proxmox’s networking config is also one of the few places where a bad change locks you out of the box that’s hosting the config, so it’s worth understanding before you’re mid-edit over SSH. ...

10GbE gear has gotten cheap enough on the used market that it shows up in nearly every “should I upgrade my network” thread on r/homelab, usually with someone insisting it changed their life and someone else insisting it did nothing for them. Both are usually telling the truth - it depends entirely on what’s actually slow in your setup right now. Here’s how to figure out which camp you’re in before you buy anything. ...