homelab.

126 readers
1 users here now

Welcome to your friendly /r/homelab, where techies and sysadmin from everywhere are welcome to share their labs, projects, builds, etc.

founded 2 years ago
MODERATORS
1
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Proper_Ear2830 on 2025-12-17 08:27:26+00:00.

2
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/WraytheZ on 2025-12-17 07:54:56+00:00.


I've been building a custom firewall in my home/lab.

Built ontop of Alpine linux, leveraging a heck of a lot of python - suricata, unbound, influxdb, mongo and a few other components.

Web Filter is entirely handled via NFQueue with a python daemon behind. Inspects the HTTP host + server ip, and TLS SNI + server ip

App control is handled via a Suricata integration. Currently have ~ 146 apps loaded and working.

Web/App filters support schedules.

Devices can be associated to users, users can be referenced in rules. Rules can enforce web/app filter policies.

Still a long way from production ready, but having a great time building this out.

Anyway, screenshots !

Dashboard. Simple right now.

Interface/Zone configurations

IP/ARP - Mapping devices to users

Firewall rules

NAT rules. The 2 DNS intercept rules are created automatically if "DNS Intercept" is enabled on the interface. The UI isn't showing the source interface, however the backend API does have this info. Need to update this page at some point to reflect it.

Web Filter profiles

Web Filter logs

Customizing the profile

Application Filter Profiles. This uses suricata as the 'engine' to identify applications based on the signatures on the firewall. Currently have ~ 146 app signatures configured.

App Filter Logs

DHCP

DNS - local records

Bug in the API call this page references.. Hence Upstream servers isn't populating. It's on my 'fix list'

Users

User Permissions / Roles

DNS Query log. I'm working to enrich this with user identity where available

https://preview.redd.it/g8osm8qdwp7g1.png?width=629&format=png&auto=webp&s=43632ff988f373daa22080ad9643783a3b32a7f7

https://preview.redd.it/m7tpe5wuwp7g1.png?width=1163&format=png&auto=webp&s=34762b109ea7420482d4f7ef4565a04473e1a7e3

https://preview.redd.it/y8ciix4xwp7g1.png?width=673&format=png&auto=webp&s=156ecd2d28eb68bc6d3b2f5e3fbeed2431a30dd8

Lagging a bit behind the web UI on available columns - e.g user, filter profiles, hits

Overall the CLI is a little behind the web UI. They both engage the same backend API.

Having a lot of fun figuring this all out :-)

My TODO list has a lot on it - captive portal, QoS, WAN Failover/Load Balancing, Netflow, embedded grafana. Also want to enable HA. The database, and application is structured to accomodate VRRP/HA

Toolset

  • Unbound (DNS)

  • isc-dhcp-server (DHCP)

  • Iptables - firewall rules

  • Iptables + NFQueue + Python daemon (Web-Filtering)

  • NFQueue + Suricata + Python integration (App Filtering)

  • MongoDB (Database)

  • InfluxDB (metrics and web/app/dns logs) - i may switch the logs elsewhere later

  • Python API to control everything

  • NextJS Web UI

  • NGINX doing reverse-proxy to the api/webui

My dev environment consists of Virtualbox + Vagrant on an ubuntu desktop.

I do not pretend to know everything - this has been an R&D exploration in my free time :-) So please be kind.

Credits to Claude for helping with scaffolding the web ui - i am terrible at anything frontend.

3
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/BasicAnnual5423 on 2025-12-17 05:15:09+00:00.

4
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Prior-Fix-3575 on 2025-12-17 03:16:56+00:00.

5
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/virtualbitz2048 on 2025-12-16 22:09:13+00:00.

6
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Saajaadeen on 2025-12-17 03:03:09+00:00.

7
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/MorgothTheBauglir on 2025-12-16 23:24:06+00:00.


Here are my two:

  1. ZFS AnyRaid (mixed size drive support) launch

  2. Cheaper USB4 10GbE adapters

8
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Speedracer_64 on 2025-12-16 22:35:29+00:00.

9
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/FcJarlD on 2025-12-16 21:48:46+00:00.

10
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Vast-Boysenberry1662 on 2025-12-16 18:02:00+00:00.


I use a beastly Dell Precision 7820 with dual 20-Core Intel Xeon Gold 6138 processors and 64GB of DDR4 2666 Mhz RAM to crawl websites. I'm an SEO for large-scale publishers, so this machine is frequently needed to run Sitebulb, my favorite crawler, to crawl anywhere from 500,000 to 3,000,000 webpages. Having 80 threads (20 cores x 2 CPUS x 2 threads per core) is handy when each instance of Chromium needs to run on its own thread to load a page.

Sitting idle, this machine was using 220watts of power. That's a lot of power being drained for just reading a report after the big crawling action is done. But I found this can be reduced significantly with just software and BIOS tweaks.

Here are the steps I took:

Aggressive Core Parking (Registry Unlock)

Windows 11 hides the settings that control how many cores it puts to sleep ("Core Parking"), but you can unhide them to force the OS to aggressively park the second CPU.

Unhide the Setting:

• Open Registry Editor (regedit) as Administrator.

• Navigate to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\0cc5b647-c1df-4637-891a-dec35c318583

• Double-click Attributes and change the value from 1 to 0. (This unlocks the menu option).

Configure Power Options

• Reboot your machine.

• Go to Control Panel > Power Options.

• Select the "Balanced" plan (Do not use High Performance).

• Click Change plan settings > Change advanced power settings.

• Expand Processor power management. You will see a new option: Processor performance core parking min cores.

• Set this to 10%.

At 80 threads, setting this to 10% told Windows to keep 8 threads active, and park the other 72. This effectively forces my second CPU into a coma until a massive workload (that exceeds the first CPU) comes along.

BIOS Settings

  • Enable Intel SpeedStep: This allow clock rates to be adjusted up and down.
  • Enable C-State: This is critical. It allows the CPU to sleep when idle. Without this, your "Core Parking" Windows tweaks will do nothing.
  • Disable SATA Controller: I'm only using M.2 in this system. By disabling the SATA controller, I saved 10 watts.
  • Audio: Uncheck "Enable Audio Controller"
  • Serial Port: Uncheck "Enable Serial Port"

Admittedly, the audio and serial port savings are negligible, but so long as I was mucking around in the BIOS I disabled anything I could think of.

After all these changes, total consumption at idle dropped from 220watts to less than 140watts, so a total savings of 80watts at idle. I don't run this machine 24/7, but if I did this would amount of over $200/year of consumption here in New Hampshire, where rates are relatively high.

If you have a dual CPU machine or even a single CPU machine with a high core count I think this is worth doing. More money to put toward a new NAS!

11
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/PrudentPerspective11 on 2025-12-16 16:31:51+00:00.

12
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/wtfIsCryptoJax on 2025-12-16 15:47:09+00:00.

13
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/acconboy on 2025-12-16 14:30:43+00:00.

14
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/sonyxperiageek on 2025-12-16 12:26:42+00:00.

15
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/GarretCMK on 2025-12-16 00:49:15+00:00.

16
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/wrapperNo1 on 2025-12-16 08:44:04+00:00.

17
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Timely_Farmer_638 on 2025-12-16 02:47:55+00:00.

18
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/cnrsmt on 2025-12-15 23:51:19+00:00.

19
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Bulky-Match-8127 on 2025-12-16 01:44:27+00:00.

20
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/oguruma87 on 2025-12-16 00:44:22+00:00.


What do you guys think about using consumer-grade SATA SSDs for bulk storage?

Assuming that you don't write to them very often, I would think that they would have some benefits in terms of power consumption and heat generation, and if you were to use a chassis that is optimized for them, you can also get more of them in a given chassis.

Anybody use consumer-grade SATA drives for bulk data storage?

21
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/heisian on 2025-12-15 23:40:18+00:00.

22
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/solynex on 2025-12-15 19:30:15+00:00.

23
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Disastrous-Mark8023 on 2025-12-15 19:20:53+00:00.

24
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/qntisback on 2025-12-15 18:41:25+00:00.

25
 
 
This is an automated archive made by the Lemmit Bot.

The original was posted on /r/homelab by /u/Life_Ad3346 on 2025-12-15 14:46:01+00:00.

view more: next ›