Questions tagged [network-design]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
568 views

untagged traffic must become tagged traffic after passing through the bridge

I'm trying to achieve something simple. I have a machine which has a single physical port enp89s0. this is connected to the native VLAN (VLAN=1). I need to create VMs and place them on a separate VLAN=...
Mazzy's user avatar
  • 247
0 votes
0 answers
89 views

Providing cloned virtual environment to multiple clients

I have a virtual environment created with vmware esxi consisting on a ipfire and a internal network with some vms. What would be the best way to clone this environment, on demand, so each client could ...
bigbigbig's user avatar
0 votes
1 answer
66 views

Best practices for database with direct user input

I’m currently working on a dynamic project, in which the users feed the database with new objects/data. Other users can later access the data other users provided. Because the data’s coming directly ...
thisismoooo's user avatar
0 votes
1 answer
552 views

Can one device simultaneously be a reverse proxy, load balancer, and firewall?

From my understanding you have: Reverse Proxy: A device standing between internal servers and the internet. Some goals: SSL termination, caching, obfuscation, more freedom to change internal ...
user494940's user avatar
1 vote
0 answers
4 views

Networking bits to number of subnets [duplicate]

How does one use the value of networking bits of a class A address to find the number of subnet bits and host bits? For example, with a subnet mask of /22, what would be the process of finding the ...
user471700's user avatar
1 vote
0 answers
192 views

Should servers at the datacenter be in the same or different Active Directory to our office?

We have 4 servers in a managed datacenter (including 2 local Domain Controllers) to host our web applications. Our 20 person office uses Azure AD. Engineers/DevOps access our servers via RDP (using ...
Marcus's user avatar
  • 400
1 vote
1 answer
119 views

VLAN/Subnet Design

I am trying to get my head around the practical implementation of VLANs/Subnets. I currently have 3 HP v1910 switches with the following subnets/VLANS; 192.168.20.0/24 Production Server (7 servers ...
gjpio's user avatar
  • 13
6 votes
1 answer
7k views

Connect AWS route53 domain name with K8s LoadBalancer Service

What I'm trying to do Create a Kubernetes environment with a single API gateway service that is mapped to a DNS address. What I have done: 1) I went to AWS Route53 service and created a subdomain. 2)...
Roman's user avatar
  • 163
-6 votes
1 answer
112 views

How to learn network administration [closed]

I already know the basics about networks. Where can I learn intermediate-advanced networking. How to become professional in this subject. I have a lot of practice but I want to learn everything ...
user439874's user avatar
0 votes
4 answers
785 views

What's the purpose of local storage hdd in Blade servers with virtualization?

I'm designing lab with a Dell M1000e and 3 M620 blade servers. Each blade server has 2 local HDD of 130GB on RAID 1. My first attempt is to install ESXi in an SD card or USB key so my local storage ...
KorXo's user avatar
  • 117
1 vote
1 answer
584 views

DNS External Resolvers Needed?

I found the picture shown below several years ago and as I'm currently studying about DNS and BIND, I wanted to understand and build the setup shown here. I do understand about the (aggregate) caching-...
Tom's user avatar
  • 75
-1 votes
1 answer
161 views

Create vswitches pn ESXI for PFsense

iam trying to build a new network infrastructure on the new blace and i have: 3 ISP WAN Links one dedicated server with one Lan card One cisco Managed switch - SF200 Model server for ERP system so ...
MOkasha's user avatar
  • 21
1 vote
1 answer
316 views

networking devices for structured cabling - building and campus distributors

Which type of network hardware devices (Router vs Swtich) you would use as a campus distributor in a structured cabling project? It seems logical to use switches as building distributor, we can ...
JDL's user avatar
  • 111
4 votes
2 answers
790 views

Do you trust LACP?

Are there any reasons why I should not rely on LACP when designing network topology? I exactly mean L2 switch to hypervisor connection, so it is the place where agregated traffic of VMs cumulates. We ...
Andy Coarse's user avatar
1 vote
1 answer
2k views

How to use another IP-address for outgoing traffic?

Background I run a server with two external IPv4 addresses. IP-address A (IP-A) and IP-address B (IP-B). Goal I would like to access IP-A over HTTPS port 443 and SSH port 22 only. IP-B shouldn't ...
Bob Ortiz's user avatar
  • 444
0 votes
0 answers
277 views

avoid data leak by block internet access for PCs, but allow internet access through remote desktop

In a small network(in my company), I would like to block some computers(PCs) to access the internet, so that sensitive data or files in those PCs can not be leaked. But I still need users of the PCs ...
ollydbg23's user avatar
  • 109
0 votes
0 answers
17 views

Branch Office Server vs VPN [duplicate]

Historically our branch offices have had their own servers to do DNS, Active Directory and a few other services. But the number of people working out of our branch office has shrunk to about 4 people. ...
Simon Foster's user avatar
  • 2,652
3 votes
1 answer
194 views

Cloud architecture design

I am designing a cloud architecture on AWS for a system processing large number of entities. I hope that this is the correct StackExchange for this question (SO did not seem appropriate to me - feel ...
Smajl's user avatar
  • 81
0 votes
2 answers
92 views

load balancer installing on database server virtual machine [closed]

I have a simple layout of my site, a load balancer sitting in front of 3 app servers which request the database. I've 4 VMs available, 3 VMs for 3 app servers, and one VM for database. Is it wise that ...
perigee's user avatar
  • 103
9 votes
1 answer
4k views

Are VLan's used to split my switch into segments?

I'm trying to plan for the following Small Office network setup: 3x Internet connections Things connected to the port in each colour can only get routed through their corresponding internet port. ...
Pure.Krome's user avatar
  • 6,608
3 votes
2 answers
674 views

Potential traffic issues on one big(ger) subnet

Posts like this: Most traffic in a corporate LAN is client to server nowadays, and a router not very well setup rather becomes a bottleneck AND a SPOF. and 200+ clients on a subnet wasn't a ...
Kev's user avatar
  • 984
-2 votes
1 answer
277 views

Why Use a NAT Instance? [closed]

Consider the following VPC: Public subnet with app servers and a separate NAT instance. Private subnet with database server. What benefits do we gain by using a stand alone NAT? EDIT: Why use ...
csi's user avatar
  • 1,565
0 votes
1 answer
1k views

TCP Load balancing

I need to implement an architecture that can serve 3 million GPS Devices sending Location Updates/Alerts (every 10 secs) to our system for processing. Features: 1) TCP communication. 1) Long lived ...
gladiator's user avatar
  • 101
-1 votes
1 answer
106 views

What are common server architectures to build a reliable website [closed]

Sorry, if my question looks too general, but I am looking for an answers to specific problems that I listed below and would appriciate any help. My website is growing in popularity and I would like ...
Temnovit's user avatar
  • 1,127
1 vote
0 answers
175 views

how to design network for virtual machines with just one nic

for the past week or so i've been recovering from the shock that i have literally no idea how my isp's network works, by getting a new box and trying to do a sensible design from scratch. our design ...
Mina Galić's user avatar
2 votes
2 answers
504 views

When should another AD domain be created purely to reduce replication traffic

I'm going over some hypothetical AD design scenarios for learning purposes. Lets say I have one domain and two physical locations, sites and DCs. The sites are connected via a limited bandwidth WAN ...
red888's user avatar
  • 4,243
16 votes
2 answers
4k views

Campus Network Design - Firewalls

I am designing a campus network, and the design looks like this: LINX is The London Internet Exchange and JANET is Joint Academic Network. My goal is an almost-fully redundant with high availability,...
user3081239's user avatar
2 votes
1 answer
132 views

"Full acces"s vs "only web access" to a network [closed]

I'm having trouble with some of the wording used by my lecturer on a exercise he gave us. The goal of the exercise is to design a network for three "labs" in our University: A general purpose lab ...
Juicy's user avatar
  • 169
0 votes
2 answers
2k views

Calculating required uplink capacity of network switch [duplicate]

Is there any common method (usable in practice) for estimating the uplink capacity of switch based on known number of users connected to this switch and the maximum internet speed they are allowed. ...
vladiz's user avatar
  • 111
0 votes
1 answer
503 views

Why use a converged network design in Hyper-V?

I am reorienting myself to Hyper-V in its Windows Server 2012 R2 incarnation and have spent a fair bit of time reading Microsoft's Designing Your Cloud Infrastructure documentation. I am in the SME ...
user avatar
1 vote
1 answer
9k views

how can I present a network diagram on the building that has 3 floors

How can I present a network diagram on the building that has 3 floors? The requirements are to separate the users in one LAN according to their department, what confuses me is on the second and on the ...
user avatar
3 votes
3 answers
2k views

DHCP Relay vs Multi-Homed DHCP Server

I'm sketching out a new network topology and I'm unsure of how to solve the issue of DHCP between two VLANs. 10.50.2.0/23 will hold the majority of our users, corporate wifi, printers etc. 10.250.3.0/...
Craig Watson's user avatar
  • 9,670
0 votes
1 answer
779 views

Where do local ISPs' core networks connect to? [closed]

Where do local ISPs' core networks connect to? Do they connect to the Internet Backbone owned by AT&T and Sprint (among others) or do they connect to an IXP (Internet eXchange Point)?
chris's user avatar
  • 109
1 vote
1 answer
2k views

LAN Redundancy - NIC, Cables + Switch?

I'm trying to move to a HA solution and would like to understand what hardware is required to have redundancy in the NICs, switch and cables. The diagrams below show how I envisage a non-redundant ...
James's user avatar
  • 325
0 votes
2 answers
213 views

Is it possible to have subnets for hosts connected to a switch? [closed]

re-EDIT I can not provide my attempts and what wen't wrong, because I am only doing the design and not actually implementing right now. Although the goal of this structure is a school network. I ...
Cream Whipped Airplane's user avatar
1 vote
1 answer
1k views

Routing Strategy for Multiple VPCs on AWS

I am planning to setup multiple Virtual Private Clouds (VPC) on AWS. These VPCs will be located in different geos. Each VPC will have public as well as private instances. I need to incorporate an ...
tilmik's user avatar
  • 135
13 votes
1 answer
1k views

"Hostile" network in the company - please comment on a security setup

I have a little specific problem here that I want (need) to solve in a satisfactory way. My company has multiple (IPv4) networks that are controlled by our router sitting in the middle. Typical ...
TomTom's user avatar
  • 51.9k
1 vote
2 answers
161 views

How to exclude requests from unwanted sources

Scenario: Client buys our analytics services and includes our analytics SDK in his mobile app. Users who download the app will start sending us lots of data. When the client stops paying for our ...
Cyprian's user avatar
  • 165
1 vote
1 answer
2k views

DNS architecture sanity check

I'm designing DNS service for a network and had a few architecture questions. The O'Reilly/ Cricket Liu DNS book and the NIST DNS security guide don't address these questions except in a very general ...
user8162's user avatar
  • 270
6 votes
1 answer
2k views

Designing segmented LAN with fairly shared hi-speed internet access on a tight budget

With another member of the owners' association, I've been tasked with designing and setting up shared, hi-speed, internet access, for our apartment building. We have very little budget and hope to be ...
abstrask's user avatar
  • 1,698
0 votes
2 answers
2k views

Network design vm virtualization in small office [closed]

I just recently bought a 16gb ram, Intel i7 quad core Mac mini to be used as the central point of entry to my network and am looking for advice on how to design a network suitable for a small office. ...
marlin's user avatar
  • 27
-1 votes
1 answer
155 views

Simulate two domains on one machine to support work/home isolation [closed]

Problem statement: How can I support isolation of identities on a signle in-home network that supports both personal and business resources? I know the Windows NT servers have plenty of methods of ...
Bob's user avatar
  • 9
6 votes
3 answers
4k views

Where should I setup a staging environment in Amazon VPC? And testing?

I setup the production environment for my service in an Amazon VPC in Oregon: 2 availability zones 1 public subnet (including bastion, nat, and ELBs) and 3 private subnets (database, web servers and ...
MiniQuark's user avatar
  • 3,995
0 votes
1 answer
67 views

Securing information against domain administrators [closed]

I'm a software developer who was given the responsibility to suggest a solution for our client that envolves infrastructure. Basically our project consists on two softwares for the audit department. ...
Rodrigo Lira's user avatar
-3 votes
2 answers
171 views

Designing a network architecture [closed]

I am building a network architecture from scratch for a small company (~20 users). I plan to use the "classical" model: -A server that contains Active Directory -A server that contains Exchange server ...
depaul's user avatar
  • 1
3 votes
1 answer
4k views

How to secure and audit outbound traffic in an enterprise environment?

What follows is a long-winded background to preface the following question: What is the industry best-practice (or what recommendations would you give) for securing outbound traffic in an enterprise ...
Jason R. Coombs's user avatar
22 votes
4 answers
2k views

Customer site is out of IP addresses, they want to go from /24 to /12 netmask... Bad idea?

One of my client sites called to ask me to change the subnet masks of the Linux servers I manage there while they re-IP/change the netmask of their network based on a 10.0.0.x scheme. "Can you change ...
ewwhite's user avatar
  • 198k
1 vote
1 answer
2k views

Can I split static IP range between 2 routers, with an upstream switch?

My ISP provides static IP range x.y.z.112 to 127. At the moment, my existing router is configured with ROUTER A (existing settings) WAN IP: x.y.z.114 Mask: x.y.z.240 Gateway: x.y.z.113 I want to ...
Jake's user avatar
  • 1,172
1 vote
1 answer
256 views

How Does EoR Design Work with Multi-tiered Data Center Topology

I just did a ton of reading about the different multi-tier network topology options as outlined by Cisco, and now that I'm looking at the physical options (End of Row (EoR) vs Top of Rack(ToR)), I ...
S.C.'s user avatar
  • 143
10 votes
2 answers
11k views

Can someone tell me what is meant by "layer 2 adjacency"?

I am working on designing the logical topology for a new data center rollout. I'm reading "Cisco Data Center Infrastructure 2.5 Design Guide" and going with the multi-tier design. There are multiple ...
S.C.'s user avatar
  • 143