Questions tagged [network-design]
The network-design tag has no usage guidance.
111
questions
1
vote
0
answers
169
views
untagged traffic must become tagged traffic after passing through the bridge
I'm trying to achieve something simple.
I have a machine which has a single physical port enp89s0. this is connected to the native VLAN (VLAN=1).
I need to create VMs and place them on a separate VLAN=...
- 227
0
votes
0
answers
85
views
Routing IPSEC traffic to specific network (VM's) - pfSense / HyerV
G'day,
Environment: OVH
Hypervisor: Windows Server 2019
VPN: IPSEC pfSense Virtual Appliance with its own external WAN interface and a LAN interface to the Hypervisor's VM's
Issue:
We're trying to set ...
0
votes
0
answers
79
views
Providing cloned virtual environment to multiple clients
I have a virtual environment created with vmware esxi consisting on a ipfire and a internal network with some vms.
What would be the best way to clone this environment, on demand, so each client could ...
0
votes
1
answer
63
views
Best practices for database with direct user input
I’m currently working on a dynamic project, in which the users feed the database with new objects/data. Other users can later access the data other users provided.
Because the data’s coming directly ...
0
votes
1
answer
487
views
Can one device simultaneously be a reverse proxy, load balancer, and firewall?
From my understanding you have:
Reverse Proxy: A device standing between internal servers and the
internet. Some goals: SSL termination, caching, obfuscation, more
freedom to change internal ...
1
vote
0
answers
4
views
Networking bits to number of subnets [duplicate]
How does one use the value of networking bits of a class A address to find the number of subnet bits and host bits? For example, with a subnet mask of /22, what would be the process of finding the ...
- 11
1
vote
0
answers
145
views
Should servers at the datacenter be in the same or different Active Directory to our office?
We have 4 servers in a managed datacenter (including 2 local Domain Controllers) to host our web applications.
Our 20 person office uses Azure AD.
Engineers/DevOps access our servers via RDP (using ...
- 400
1
vote
1
answer
113
views
VLAN/Subnet Design
I am trying to get my head around the practical implementation of VLANs/Subnets.
I currently have 3 HP v1910 switches with the following subnets/VLANS;
192.168.20.0/24 Production Server (7 servers ...
- 13
6
votes
1
answer
7k
views
Connect AWS route53 domain name with K8s LoadBalancer Service
What I'm trying to do
Create a Kubernetes environment with a single API gateway service that is mapped to a DNS address.
What I have done:
1) I went to AWS Route53 service and created a subdomain.
2)...
- 163
-6
votes
1
answer
108
views
How to learn network administration [closed]
I already know the basics about networks. Where can I learn intermediate-advanced networking. How to become professional in this subject. I have a lot of practice but I want to learn everything ...
0
votes
4
answers
748
views
What's the purpose of local storage hdd in Blade servers with virtualization?
I'm designing lab with a Dell M1000e and 3 M620 blade servers. Each blade server has 2 local HDD of 130GB on RAID 1.
My first attempt is to install ESXi in an SD card or USB key so my local storage ...
- 117
1
vote
1
answer
558
views
DNS External Resolvers Needed?
I found the picture shown below several years ago and as I'm currently studying about DNS and BIND, I wanted to understand and build the setup shown here. I do understand about the (aggregate) caching-...
- 75
-1
votes
1
answer
152
views
Create vswitches pn ESXI for PFsense
iam trying to build a new network infrastructure on the new blace
and i have:
3 ISP WAN Links
one dedicated server with one Lan card
One cisco Managed switch - SF200 Model
server for ERP system
so ...
- 21
1
vote
1
answer
300
views
networking devices for structured cabling - building and campus distributors
Which type of network hardware devices (Router vs Swtich) you would use as a campus distributor in a structured cabling project?
It seems logical to use switches as building distributor, we can ...
- 111
4
votes
2
answers
699
views
Do you trust LACP?
Are there any reasons why I should not rely on LACP when designing network topology? I exactly mean L2 switch to hypervisor connection, so it is the place where agregated traffic of VMs cumulates. We ...
- 51
1
vote
1
answer
2k
views
How to use another IP-address for outgoing traffic?
Background
I run a server with two external IPv4 addresses. IP-address A (IP-A) and IP-address B (IP-B).
Goal
I would like to access IP-A over HTTPS port 443 and SSH port 22 only. IP-B shouldn't ...
- 444
0
votes
0
answers
244
views
avoid data leak by block internet access for PCs, but allow internet access through remote desktop
In a small network(in my company), I would like to block some computers(PCs) to access the internet, so that sensitive data or files in those PCs can not be leaked. But I still need users of the PCs ...
- 109
0
votes
0
answers
17
views
Branch Office Server vs VPN [duplicate]
Historically our branch offices have had their own servers to do DNS, Active Directory and a few other services. But the number of people working out of our branch office has shrunk to about 4 people.
...
- 2,622
3
votes
1
answer
190
views
Cloud architecture design
I am designing a cloud architecture on AWS for a system processing large number of entities. I hope that this is the correct StackExchange for this question (SO did not seem appropriate to me - feel ...
- 81
0
votes
2
answers
88
views
load balancer installing on database server virtual machine [closed]
I have a simple layout of my site, a load balancer sitting in front of 3 app servers which request the database. I've 4 VMs available, 3 VMs for 3 app servers, and one VM for database. Is it wise that ...
- 103
9
votes
1
answer
4k
views
Are VLan's used to split my switch into segments?
I'm trying to plan for the following Small Office network setup:
3x Internet connections
Things connected to the port in each colour can only get routed through their corresponding internet port.
...
- 6,478
3
votes
2
answers
552
views
Potential traffic issues on one big(ger) subnet
Posts like this:
Most traffic in a corporate LAN is client to server nowadays, and a
router not very well setup rather becomes a bottleneck AND a SPOF. and
200+ clients on a subnet wasn't a ...
- 984
-2
votes
1
answer
270
views
Why Use a NAT Instance? [closed]
Consider the following VPC:
Public subnet with app servers and a separate NAT instance.
Private subnet with database server.
What benefits do we gain by using a stand alone NAT?
EDIT: Why use ...
- 1,545
0
votes
1
answer
1k
views
TCP Load balancing
I need to implement an architecture that can serve 3 million GPS Devices sending Location Updates/Alerts (every 10 secs) to our system for processing.
Features: 1) TCP communication. 1) Long lived ...
- 101
-1
votes
1
answer
99
views
What are common server architectures to build a reliable website [closed]
Sorry, if my question looks too general, but I am looking for an answers to specific problems that I listed below and would appriciate any help.
My website is growing in popularity and I would like ...
- 1,127
1
vote
0
answers
171
views
how to design network for virtual machines with just one nic
for the past week or so i've been recovering from the shock that i have literally no idea how my isp's network works, by getting a new box and trying to do a sensible design from scratch.
our design ...
- 79
2
votes
2
answers
494
views
When should another AD domain be created purely to reduce replication traffic
I'm going over some hypothetical AD design scenarios for learning purposes.
Lets say I have one domain and two physical locations, sites and DCs. The sites are connected via a limited bandwidth WAN ...
- 4,151
15
votes
2
answers
4k
views
Campus Network Design - Firewalls
I am designing a campus network, and the design looks like this:
LINX is The London Internet Exchange and JANET is Joint Academic Network.
My goal is an almost-fully redundant with high availability,...
- 161
2
votes
1
answer
130
views
"Full acces"s vs "only web access" to a network [closed]
I'm having trouble with some of the wording used by my lecturer on a exercise he gave us. The goal of the exercise is to design a network for three "labs" in our University:
A general purpose lab ...
- 169
0
votes
2
answers
2k
views
Calculating required uplink capacity of network switch [duplicate]
Is there any common method (usable in practice) for estimating the uplink capacity of switch based on known number of users connected to this switch and the maximum internet speed they are allowed.
...
- 111
0
votes
1
answer
498
views
Why use a converged network design in Hyper-V?
I am reorienting myself to Hyper-V in its Windows Server 2012 R2 incarnation and have spent a fair bit of time reading Microsoft's Designing Your Cloud Infrastructure documentation. I am in the SME ...
user62491
1
vote
1
answer
7k
views
how can I present a network diagram on the building that has 3 floors
How can I present a network diagram on the building that has 3 floors? The requirements are to separate the users in one LAN according to their department, what confuses me is on the second and on the ...
pros
3
votes
3
answers
2k
views
DHCP Relay vs Multi-Homed DHCP Server
I'm sketching out a new network topology and I'm unsure of how to solve the issue of DHCP between two VLANs.
10.50.2.0/23 will hold the majority of our users, corporate wifi, printers etc.
10.250.3.0/...
- 9,545
0
votes
1
answer
757
views
Where do local ISPs' core networks connect to? [closed]
Where do local ISPs' core networks connect to?
Do they connect to the Internet Backbone owned by AT&T and Sprint (among others) or do they connect to an IXP (Internet eXchange Point)?
- 109
1
vote
1
answer
2k
views
LAN Redundancy - NIC, Cables + Switch?
I'm trying to move to a HA solution and would like to understand what hardware is required to have redundancy in the NICs, switch and cables.
The diagrams below show how I envisage a non-redundant ...
- 325
0
votes
2
answers
194
views
Is it possible to have subnets for hosts connected to a switch? [closed]
re-EDIT I can not provide my attempts and what wen't wrong, because I am only doing the design and not actually implementing right now. Although the goal of this structure is a school network. I ...
1
vote
1
answer
1k
views
Routing Strategy for Multiple VPCs on AWS
I am planning to setup multiple Virtual Private Clouds (VPC) on AWS. These VPCs will be located in different geos. Each VPC will have public as well as private instances. I need to incorporate an ...
- 135
13
votes
1
answer
1k
views
"Hostile" network in the company - please comment on a security setup
I have a little specific problem here that I want (need) to solve in a satisfactory way. My company has multiple (IPv4) networks that are controlled by our router sitting in the middle. Typical ...
- 51.5k
1
vote
2
answers
157
views
How to exclude requests from unwanted sources
Scenario:
Client buys our analytics services and includes our analytics SDK in his mobile app.
Users who download the app will start sending us lots of data.
When the client stops paying for our ...
- 165
1
vote
1
answer
2k
views
DNS architecture sanity check
I'm designing DNS service for a network and had a few architecture questions. The O'Reilly/ Cricket Liu DNS book and the NIST DNS security guide don't address these questions except in a very general ...
- 270
6
votes
1
answer
2k
views
Designing segmented LAN with fairly shared hi-speed internet access on a tight budget
With another member of the owners' association, I've been tasked with designing and setting up shared, hi-speed, internet access, for our apartment building. We have very little budget and hope to be ...
- 1,678
0
votes
2
answers
2k
views
Network design vm virtualization in small office [closed]
I just recently bought a 16gb ram, Intel i7 quad core Mac mini to be used as the central point of entry to my network and am looking for advice on how to design a network suitable for a small office.
...
- 27
-1
votes
1
answer
138
views
Simulate two domains on one machine to support work/home isolation [closed]
Problem statement: How can I support isolation of identities on a signle in-home network that supports both personal and business resources? I know the Windows NT servers have plenty of methods of ...
- 9
6
votes
3
answers
4k
views
Where should I setup a staging environment in Amazon VPC? And testing?
I setup the production environment for my service in an Amazon VPC in Oregon:
2 availability zones
1 public subnet (including bastion, nat, and ELBs) and 3 private subnets (database, web servers and ...
- 3,815
0
votes
1
answer
64
views
Securing information against domain administrators [closed]
I'm a software developer who was given the responsibility to suggest a solution for our client that envolves infrastructure.
Basically our project consists on two softwares for the audit department. ...
- 101
-3
votes
2
answers
170
views
Designing a network architecture [closed]
I am building a network architecture from scratch for a small company (~20 users). I plan to use the "classical" model:
-A server that contains Active Directory
-A server that contains Exchange server
...
- 1
3
votes
1
answer
4k
views
How to secure and audit outbound traffic in an enterprise environment?
What follows is a long-winded background to preface the following question: What is the industry best-practice (or what recommendations would you give) for securing outbound traffic in an enterprise ...
- 999
22
votes
4
answers
2k
views
Customer site is out of IP addresses, they want to go from /24 to /12 netmask... Bad idea?
One of my client sites called to ask me to change the subnet masks of the Linux servers I manage there while they re-IP/change the netmask of their network based on a 10.0.0.x scheme.
"Can you change ...
- 197k
1
vote
1
answer
2k
views
Can I split static IP range between 2 routers, with an upstream switch?
My ISP provides static IP range x.y.z.112 to 127. At the moment, my existing router is configured with
ROUTER A (existing settings)
WAN IP: x.y.z.114
Mask: x.y.z.240
Gateway: x.y.z.113
I want to ...
- 1,170
1
vote
1
answer
248
views
How Does EoR Design Work with Multi-tiered Data Center Topology
I just did a ton of reading about the different multi-tier network topology options as outlined by Cisco, and now that I'm looking at the physical options (End of Row (EoR) vs Top of Rack(ToR)), I ...
- 143