Got a DM from one of my twitter followers in response to a recent tweet of mine about how complex my home network is growing… anyways, they wanted details.
Details?
You want details?!
You can't handle the details!
Just kidding…
Ok, so here goes:
Internet: Comcast Business HSI (DOCSIS 3.0, 50 down, 10 up)
Why?! Stupid, frakking, bandwidth caps. Which really gets my goat. Before I got DOCSIS 3.0, my Internet bill was $89.95 per month for 16 down, 6 up, and with no caps. Obviously that was equitable for Comcast then since business class customers have no caps. So, why not just bump everyone up to that price point. Those that can afford it will stay, those that can't will go DSL.
Now my bill is $210/ month, but $20 of that is for 5 static IP addresses.
You may think that's a lot, but please note - I don't have cable TV, Satellite, or a landline phone. Add all of those up and I'm sure you'll find that you're paying about the same cost per month as I am.
Firewall(s):
(1) Comcast-provided SMC-8014 DOCSIS 3.0 router/ firewall.
(2) Apple Airport Extreme Base Station (802.11n)
(3) pfSense (multi-homed)
(4) Apple Airport Extreme Base Station (802.11g)
So, Firewall (1) is the main Comcast 4 port router. I've got 5 static IPs (technically 6, because the GW address of the router is a usable address for NAT purposes). Plugged into it are the Apple Airport Extreme Base Station (Firewall (2)) which provides WiFi connectivity to "LOCALNET" (and sharing an Airport Express 802.11n Base Station via WDS). LOCALNET is the main household network which has all my endpoint devices.
Firewall (3) is a HP Compaq with three GigE network cards providing VLAN'ing and IDS to my server network ("SERVERNET"). It's also multi-homed to a 6Mbps ClearWire net connection for failover and backup.
Firewall (4) is an Apple Airport Extreme Base Station (2nd Generation "cone", 802.11g) which provides WiFi connectivity to "GUESTNET" (and sharing an Airport Express 802.11g Base Station via WDS). "GUESTNET" is an open wireless access point, but its configured (and DHCP propagated) DNS servers are pointing to a VERY strict policy from OpenDNS.
All firewalls each have their own static IP address configured for their WAN address.
The Macs:
(1) hecate
(2) demeter
(3) isis
(4) persephone
(5) venus
All the Macs are on LOCALNET, have static DHCP reservations, and are configured to only support Apple File & Print (this is by choice!)
Hecate is a 24" iMac Intel CoreDuo and is my main workstation. It's got a Drobo (8TB) connected to it (only about 1.5TB is currently being used).
Demeter is a Dual G4 PowerMac. It also has a Drobo connected to it (8TB) and is the main fileserver which has archives and backups for some of the other workstations.
Isis is a Quad G5 PowerMac. It also has a Drobo connected to it (2nd Generation, Firewire 800, 8TB) which is my main animation and rendering workstation.
Persephone is a 15" Intel CoreDuo MacBook Pro. No Drobo on it, but when she's on my desk she's attached to a 1TB external firewire 800 drive which has a bunch of VMWare images on it for research.
Venus is my 500MHz G4 Cube which as long as she boots, will always have a place on my network. She doesn't do much now-a-days except run Firefox. :-)
The UNIX Boxen:
I realize that's not an accurate subject heading since Mac OS X is UNIX in its own-right.
(1) pinky
(2) brain
(3) lenny
Pinky is a quad-core HP Compaq which is hosting several VirtualBox guest machines running headless. Pinky is primarily my "dev" box where I test out new versions and new OSes before moving them to "production".
Brain is an eight-core Dell which is hosting several VirtualBox guest machines running headless. Brain is best described as my "production vm server" (but it's not running VMWare). It's got the most memory (16GB), the fastest processor, and the most disk space.
Lenny is an EeePC 1000HE netbook running Ubuntu NBR.
Both Pinky and Brain, along with the VMs running on those boxes, sit on SERVERNET. The way the firewall rules are configured, there is a one-way trust between LOCALNET and SERVERNET. Any traffic is allowed from LOCALNET to SERVERNET but no traffic is allowed back in.
The Toys:
(1) AppleTV (x2)
(2) Chumby (x2)
(3) The Orbs (x3)
(4) Nokia N810
Just because I don't subscribe to cable or satellite doesn't mean I don't enjoy TV every once in a while. :-) Thanks to an exhaustive iTunes Library, Boxee, Joost, and Hulu, entertainment is a button press on the remote control away.
I fell in love with the Chumby when I first discovered them and have one on my desk in my office and one on the nightstand. It's my alarm clock, and the two powered USB ports are ideal for charging both a Blackberry and an iPhone at night while you're sleeping!
The Orbs are something I discovered when some folks in my office brought some in to exhibit and are fantastic! They glow different colors based on the telemetry their receiving. For example, I have one configured for weather, one to alert me if some of my servers are down, and one to track the performance of my stock portfolio (which has been depressing.)
The Nokia N810 is an tiny Internet PC running a custom version of Linux called Maemo. I primarily use it for Email and streaming media.
Not mentioned is my iPhone 3G, because I don't consider it a "toy". But, it's on the network too (obviously).
So why do all of this?
Because I can. :-)
But in all seriousness, I work in IT, in Information Security, and it's important I keep my skills up.
Any Windows Boxes?
I hate to admit this, but actually yes. If you ask me in public I'll deny it, but feel free to refer anyone to this message disputing my denials. :-)
More for curiosity, and definitely not for anything serious though.
They're not powered normally, but I've got every version of DOS and Windows running all the way back to DOS 5.0 (anyone remember EMM386?), DOS 6.22, Windows 3.1, WFWG 3.11, Win95, Win95 OSR2, Win 98, NT 3.51, NT 4.0, 2000, XP, 2003, Vista (gah!), 2008, and now Windows 7. Also configured are OS/2 Warp, last version of BSD/OS from WindRiver, Haiku (BeOS), Solaris x86, OpenSolaris, Xenix, Minix, and the lastest (as of a few weeks ago) stable releases of FreeBSD, OpenBSD, and NetBSD.
In the next couple of weeks I'll be standing up a Windows Server 2008 R2 Enterprise Certificate Authority here at the house (root, policy, and issuing CAs). If you haven't guessed by now, I'm a UNIX guy, but one of my primary responsibilities at work is managing our Certificate Authority, and THAT runs Windows. :-)
So that pretty much sums up the "network". For the most part, a 20,000ft view (but dipping below the clouds in a few spots).
Yes I'm a geek, and proud of it!
But in case you're wondering, yes my electric bill can get expensive in the summertime, and here I work for a power company! Unfortunately, I work for a different power company than that serves my house. Even if they were the same, it's not like I could get a discount so I'm not worried. :-)
Cheers! Now, it's time for bed…