Main Portfolio
Portfolio / Homelab Command & Architecture Center
CLUSTER STATUS // 3 NODES ACTIVE · 99.2% UPTIME

Physical Infrastructure &
Homelab Architecture

A dedicated bare-metal testing environment built with Dell PowerEdge rack servers. Used to experiment with hypervisor clustering, enterprise ZFS storage, multi-VLAN perimeter defense, and automated disaster recovery workflows.

RUNTIME ENVIRONMENT PROXMOX VE CLUSTER
Hypervisor Core Proxmox VE 8.2 (Linux 6.8)
Backup Target PBS 3.2 (ZFS Deduplication)
Perimeter Gateway pfSense CE 2.7+ (802.1Q VLANs)
Container Orchestration Docker Compose & K3s Lite
Average CPU Load
16.4%
14 Active Cores / 24 Threads
Cluster ECC RAM
56 GB Total
21.8 GB Allocated (LXC/VMs)
ZFS Pool Storage
8.2 TB Pool
RAID-Z1 & NVMe Mirror
Network Egress
14.8 MB/s
Temp: 39°C
01 // BARE-METAL SERVER RACK

Physical Server Rack & Node Inspector

Click on any server chassis in the 19" rack below to inspect its bare-metal compute specs, hypervisor roles, and containerized workloads.

DELL POWEREDGE RACK [19" 4U] RACK-01 / ACTIVE
1U // 03
Dell PowerEdge R320
PROXMOX VE
SSD1
SSD2
SAS1
SAS2
1U // 02
Dell PowerEdge R310
PROXMOX BACKUP
SAS1
SAS2
SAS3
SAS4
1U // 01
Dell PowerEdge R210
PFSENSE EDGE
SSD
BAY2
BAY3
BAY4
Click any server unit to view live technical breakdown

Dell PowerEdge R320

PRIMARY COMPUTE & VIRTUALIZATION

ONLINE · HEALTHY
Compute Hypervisor (Proxmox VE 8.x)

Serves as the primary bare-metal compute engine in the homelab. Runs low-overhead LXC containers for self-hosted apps and dedicated KVM virtual machines for Kubernetes test clusters, Keycloak IAM, and ThingsBoard IoT brokers.

Architectural Purpose
  • High-density containerization using Linux Containers (LXC) for sub-millisecond start times.
  • KVM-based guest virtualization with PCI-passthrough capabilities.
  • Dedicated automated backup integration with Proxmox Backup Server (PBS).
Processor
Intel Xeon E5-2430 v2
Memory
32 GB DDR3 ECC Registered
Storage Topology
ZFS Mirror (2x 500GB SSD) + 2x 1TB SAS
Operating System
Proxmox VE 8.2 (Linux 6.8 Kernel)
Network Interfaces
2x 1GbE LACP Bond (802.3ad) + iDRAC7
Power & Thermal
495W Platinum PSU (~68W Draw)
Subnet & VLAN Assignment
VLAN 10 (Management), VLAN 20 (Compute), VLAN 40 (DMZ)

Active containers, daemons, and virtualization guests hosted on this node:

02 // NETWORK ARCHITECTURE

Multi-VLAN Network Topology

Interactive packet flow and segmentation diagram powered by pfSense firewall rules and 802.1Q tagged switches.

Showing all physical links & trunked 802.1Q VLAN routes across pfSense Gateway, Proxmox Hypervisor, and PBS.

INTERNET ISP Fiber pfSense Edge Dell R210 1U NAT / WireGuard VLAN Trunk Managed GbE Proxmox VE Cluster Dell PowerEdge R320 • LXC Containers (ThingsBoard, NPM) • K3s Kubernetes Nodes & Keycloak Proxmox Backup (PBS) Dell PowerEdge R310 • ZFS RAID-Z1 Chunk Store • 4.8x Deduplication & LTO Archival IoT & Lab Sandbox VLAN 50 (Firewalled)
03 // CONTAINER WORKLOADS

Running Services & Workloads

Directory of containerized platforms, IoT brokers, identity providers, and observability stacks active in the lab.

RUNNING
ThingsBoard IoT Platform
Open-source IoT platform for device connectivity, telemetry ingestion, rule engine workflows, and live dashboard visualization.
LXC // Debian 12 Port 9090
RUNNING
Keycloak Identity Provider
Centralized OpenID Connect (OIDC) and OAuth 2.0 Single Sign-On (SSO) authentication server securing lab dashboards and internal tools.
Docker Container Port 8080 (HTTPS)
RUNNING
Nginx Proxy Manager
Reverse proxy engine managing SSL/TLS automated Let's Encrypt certificates, access lists, and secure domain routing in VLAN 40 DMZ.
DMZ Gateway Port 80 / 443
RUNNING
Prometheus & Grafana
Time-series metric scraping from Proxmox node exporters, pfSense SNMP stats, and container metrics with automated alert dispatching.
Observability Port 3000 / 9090
RUNNING
Uptime Kuma Telemetry
Synthetic HTTP/TCP heartbeat checks and DNS probe monitor tracking lab uptime, SLA thresholds, and status notifications.
Synthetic Probe 99.2% Uptime
RUNNING
WireGuard Remote Gateway
High-speed encrypted point-to-site VPN tunnel hosted on the pfSense perimeter allowing secure remote engineering from anywhere.
pfSense Module UDP 51820
04 // DISASTER RECOVERY & RESILIENCE

Storage & Backup Pipeline (3-2-1 Rule)

Enterprise-grade recovery protocols guaranteeing zero data loss across VM corruption or hardware failure.

PHASE 01 // PRODUCTION SNAPSHOT

Live ZFS NVMe Snapshots

Proxmox VE takes automated atomic ZFS copy-on-write snapshots without pausing running guest VMs or database transactions.

Hourly Rolling Retention (24h)
PHASE 02 // DEDUPLICATED PBS SYNC

Proxmox Backup Server (PBS)

Chunk-based deduplication streams changed blocks over the isolated VLAN 30 network to the Dell R310 storage pool, reducing backup sizes by up to 80%.

4.82x Deduplication Ratio
PHASE 03 // COLD & OFFSITE ARCHIVE

Encrypted LTO / Cloud Offsite

Critical configuration files, database dumps, and disaster recovery keys are packaged into encrypted archives for cold storage retention and air-gapped recovery.

Air-Gapped Disaster Recovery
05 // CLI DIAGNOSTICS

Live Diagnostics Console

Execute real infrastructure diagnostic commands against simulated live node endpoints.

Quick Run:
root@homelab-core:~ (ttyS0 / Serial Console) SSH ESTABLISHED
root@homelab:~#

Interested in DevOps Collaboration or Infrastructure Engineering?

Check out my experience at UTECH Sri Lanka, technical skill matrix, or get in touch directly.

View Experience Contact Sushen