You’re welcome. I’m glad that I could help you :)
You’re welcome. I’m glad that I could help you :)
I’m fairly new to MikroTik and no expert either, but I don’t think you need a second bridge. You can add your VLANs to the default bridge and handle internet access through firewall rules. Depending on your existing firewall logic, you may have to drop/reject all traffic from the IoT subnet to the internet and all other subnets. Make sure that you add the bridge also as a tagged interface to the VLAN! Else, the DHCP server and all services on the router can not reach the IoT subnet.
I would also recommend to segregate all traffic into different VLANs (WAN, LAN, IoT, …). This makes it easy to manage firewall rules because you can then use either VLAN interfaces or interface lists containing multiple VLAN interfaces for similiar firewall rules. You can simply untag outgoing traffic on specific ports if you want and add a specific tag for incoming traffic.
I have a similiar setup running. Everything is separated into VLANs and these VLANs are configured on the default bridge. Routing/allowing and denying traffic to/from the internet is handled by firewall rules. And I have defined interface lists like NO_INTERNET_ACCESS
, NO_LAN_ACCESS
, etc. These lists are then used by the firewall rules. If you later want to add another VLAN that should not get access to the internet you can simply add it to the NO_INTERNET_ACCESS
list and you do not have to alter your firewall rules for that specific VLAN.
Take this advice with a grain of salt. If possible, do not test this on your production network but on a separate, isolated router.
Cube 2: Sauerbraten seems to still be maintained. I haven’t played it for a long time, though.
What does DSO stand for?
What software did you use to make this diagram?
For my workstation I’m using a small script that packs and compresses all relevant directories with tar once a week. The resulting file is then copied to a local backup drive and to my NAS. An encrypted version of that file is sent to an offsite VPS.
For my selfhosted services (on Proxmox) I’m using ProxmoxBackupServer.
I’ve purposely build that NAS around two or three years ago. It’s a Gigabyte B360M D3H mainboard, Intel Pentium Gold G5400 and 16GB of the cheapest RAM I could find. An Adaptec 71605 card provides SAS/SATA connections for up to 16 drives and a Mellanox Connect-X3 connects my NAS via 10Gbit/s to my network. The case is an Inter-Tech IPC 4U-4424 . It has 24 hot swap bays. But I would not recommend it because the backplane is terrible. Four or five slots are not working. Sometimes, when I re-insert a drive, it is not detected.
Using cheap RAM bit me in the ass last year as one of the RAM sticks started to fail. I didn’t notice that there is a problem with the RAM at first. Only when I observed that one of my scripts was not working I started to investigate the problem. Turns out that one of the RAM sticks failed. Re-inserting the stick did not resolve the problem so I replaced all sticks with old Crucial RAM I had laying around. Some files that I transfered to the NAS during that time period are corrupt. In the future I won’t use cheap RAM anymore and I’m also currently planning to replace the mainboard and CPU with something that supportes ECC RAM so that I can be notified when on of the sticks starts to fail.
I like your setup.
Thanks :)
Is your nas on Ext4?
Yes, all HDDs in my NAS are formatted with EXT4. I don’t use RAID because there are mostly static files stored there and the drives are configured to spin down after 30 minutes of inactivity.
MD1200 DAS
How loud are those? I’ve heard that the Dell PowerVault DAS arrays are quite loud.
I believe I could reduce the power consumption by ~50W-60W by replacing the R730 with a modern “consumer” mainboard + CPU. But I need two power supplies (I had some issues a few months ago with my UPS) and iDRAC/IPMI is so convenient that I don’t want to miss it anymore.
I’m also currently searching for something power efficient to replace the Pentium in my NAS. Reason for that are some problems with bad RAM a year ago. ECC RAM would be nice to have, so that I can be notified when a RAM stick goes bad. I currently do not know for how long the old RAM stick was bad and which files may be corrupted because of that (I do not use a checksumming file system such as ZFS or BTRFS on my NAS).
My rack currently consumes about 300W. This includes the following hardware:
You can also download the *.vsix file of the desired extension from either Github or Microsoft’s extension marketplace and install it manually by clicking on “Install from VSIX” in the Extensions menu.
This obviously doesn’t solve the update problem and it is also questionable if this is in terms with the “Microsoft Terms of Use” of the extension.
I prefer digital books because of the following points:
Only downside: