Symfony Profiler

[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "farcaller@fstab.sh"
    +username: "@farcaller@fstab.sh"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: "**beep ** bop."
    +lastActive: DateTime @1728288680 {#273
      date: 2024-10-07 10:11:20.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 74862
    -password: "$2y$13$rWsJcMyA8J4LcXZtiU4zruNmsWAsmzSfqHZgkrrx/hgl43Co3oiu6"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "farcaller@fstab.sh"
    +apProfileId: "https://fstab.sh/u/farcaller"
    +apPublicUrl: "https://fstab.sh/u/farcaller"
    +apFollowersUrl: null
    +apInboxUrl: "https://fstab.sh/inbox"
    +apDomain: "fstab.sh"
    +apPreferredUsername: "farcaller"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1700269471 {#274
      date: 2023-11-18 02:04:31.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699857340 {#268
      date: 2023-11-13 07:35:40.0 +01:00
    }
  }
  "stretchedLink" => false
]

App\Twig\Components\UserBoxComponent {#2053
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "farcaller@fstab.sh"
    +username: "@farcaller@fstab.sh"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: "**beep ** bop."
    +lastActive: DateTime @1728288680 {#273
      date: 2024-10-07 10:11:20.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 74862
    -password: "$2y$13$rWsJcMyA8J4LcXZtiU4zruNmsWAsmzSfqHZgkrrx/hgl43Co3oiu6"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "farcaller@fstab.sh"
    +apProfileId: "https://fstab.sh/u/farcaller"
    +apPublicUrl: "https://fstab.sh/u/farcaller"
    +apFollowersUrl: null
    +apInboxUrl: "https://fstab.sh/inbox"
    +apDomain: "fstab.sh"
    +apPreferredUsername: "farcaller"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1700269471 {#274
      date: 2023-11-18 02:04:31.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699857340 {#268
      date: 2023-11-13 07:35:40.0 +01:00
    }
  }
  +stretchedLink: false
}

[
  "user" => App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "farcaller@fstab.sh"
    +username: "@farcaller@fstab.sh"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: "**beep ** bop."
    +lastActive: DateTime @1728288680 {#273
      date: 2024-10-07 10:11:20.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 74862
    -password: "$2y$13$rWsJcMyA8J4LcXZtiU4zruNmsWAsmzSfqHZgkrrx/hgl43Co3oiu6"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "farcaller@fstab.sh"
    +apProfileId: "https://fstab.sh/u/farcaller"
    +apPublicUrl: "https://fstab.sh/u/farcaller"
    +apFollowersUrl: null
    +apInboxUrl: "https://fstab.sh/inbox"
    +apDomain: "fstab.sh"
    +apPreferredUsername: "farcaller"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1700269471 {#274
      date: 2023-11-18 02:04:31.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699857340 {#268
      date: 2023-11-13 07:35:40.0 +01:00
    }
  }
]

App\Twig\Components\UserActionsComponent {#2148
  +user: App\Entity\User {#265
    +avatar: null
    +cover: null
    +email: "farcaller@fstab.sh"
    +username: "@farcaller@fstab.sh"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: "**beep ** bop."
    +lastActive: DateTime @1728288680 {#273
      date: 2024-10-07 10:11:20.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
    +entries: Doctrine\ORM\PersistentCollection {#196 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
    +posts: Doctrine\ORM\PersistentCollection {#84 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
    +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
    +follows: Doctrine\ORM\PersistentCollection {#1917 …}
    +followers: Doctrine\ORM\PersistentCollection {#1601 …}
    +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
    +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
    +reports: Doctrine\ORM\PersistentCollection {#1791 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
    +violations: Doctrine\ORM\PersistentCollection {#1824 …}
    +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
    +awards: Doctrine\ORM\PersistentCollection {#1929 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
    +categories: Doctrine\ORM\PersistentCollection {#1880 …}
    -id: 74862
    -password: "$2y$13$rWsJcMyA8J4LcXZtiU4zruNmsWAsmzSfqHZgkrrx/hgl43Co3oiu6"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
    +apId: "farcaller@fstab.sh"
    +apProfileId: "https://fstab.sh/u/farcaller"
    +apPublicUrl: "https://fstab.sh/u/farcaller"
    +apFollowersUrl: null
    +apInboxUrl: "https://fstab.sh/inbox"
    +apDomain: "fstab.sh"
    +apPreferredUsername: "farcaller"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1700269471 {#274
      date: 2023-11-18 02:04:31.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699857340 {#268
      date: 2023-11-13 07:35:40.0 +01:00
    }
  }
}

[
  "entry" => Proxies\__CG__\App\Entity\Entry {#1691
    +user: Proxies\__CG__\App\Entity\User {#2411
      +avatar: null
      +cover: null
      +email: "OpenTheSeaLegs@lemmyf.uk"
      +username: "@OpenTheSeaLegs@lemmyf.uk"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728071407 {#3402
        date: 2024-10-04 21:50:07.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3407 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3410 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3412 …}
      +entries: Doctrine\ORM\PersistentCollection {#3414 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3416 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3418 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3420 …}
      +posts: Doctrine\ORM\PersistentCollection {#3422 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3424 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3426 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3428 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3430 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3432 …}
      +follows: Doctrine\ORM\PersistentCollection {#3434 …}
      +followers: Doctrine\ORM\PersistentCollection {#3436 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3438 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3440 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3442 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3444 …}
      +reports: Doctrine\ORM\PersistentCollection {#3446 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3448 …}
      +violations: Doctrine\ORM\PersistentCollection {#3450 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3452 …}
      +awards: Doctrine\ORM\PersistentCollection {#3454 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3456 …}
      +categories: Doctrine\ORM\PersistentCollection {#3458 …}
      -id: 71828
      -password: "$2y$13$n5hmw3iJuYOg0xMVUwK.1uUOBxcOsJkRP3G6R8QSqxFJV42Y.pV2W"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3460 …}
      +apId: "OpenTheSeaLegs@lemmyf.uk"
      +apProfileId: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apPublicUrl: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmyf.uk/inbox"
      +apDomain: "lemmyf.uk"
      +apPreferredUsername: "OpenTheSeaLegs"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729528414 {#3399
        date: 2024-10-21 18:33:34.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699177415 {#3401
        date: 2023-11-05 10:43:35.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1573
      +icon: Proxies\__CG__\App\Entity\Image {#3030 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#3009
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#3029 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#3027 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3032 …}
      +entries: Doctrine\ORM\PersistentCollection {#3033 …}
      +posts: Doctrine\ORM\PersistentCollection {#3036 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3038 …}
      +bans: Doctrine\ORM\PersistentCollection {#3044 …}
      +reports: Doctrine\ORM\PersistentCollection {#3052 …}
      +badges: Doctrine\ORM\PersistentCollection {#3065 …}
      +logs: Doctrine\ORM\PersistentCollection {#3075 …}
      +awards: Doctrine\ORM\PersistentCollection {#3057 …}
      +categories: Doctrine\ORM\PersistentCollection {#3081 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#3010
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#3011
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2013 …}
    +slug: "Feedback-on-Design-and-Firewall-Options"
    +title: "Feedback on Design and Firewall Options"
    +url: null
    +body: """
      All the cool projects I see while lurking around here have thrown me into the world of Self-Hosting! Some months ago I got myself a NAS, flashed it with TrueNAS and started playing. Today, I am ready to face the creation of my first homelab.\n
      \n
      Since I got the basic data storage working, I decided to continue with the Firewall setup. I’d like to have my security figured out before I start spinning up machines, playing with their configs and unwittingly opening all kind of arcane doors to the unknown. So I turn to the Fediverse!\n
      \n
      I’d like to create the standard network with a DMZ. Within the network, I plan to use VLANS to manage traffic between devices, and the firewall to limit internet access.\n
      \n
      This is a sketch of what I think I want to achieve:\n
      \n
      ![](https://lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)\n
      \n
      ### Connections\n
      \n
      - The Consoles will connect only to the internet\n
      - The Home Devices (printers) will connect only to the Home WKS\n
      - There will be a NAS device hosting VMs with services accessible only from the home network: \n
          - The Home Automation will connect to IoT\n
          - The Recipes will connect to Home Wks\n
          - The Data Archive will connect to Home Wks\n
          - Jellybean will connect to: \n
              - Home Wks\n
              - TV\n
          - *arr Stack will connect to: \n
              - The Internet\n
              - the NAS (presumably Jellybean)\n
      - The Home WKS connect to pretty much anything\n
      \n
      ### Available Hardware\n
      \n
      - OpenWRT compatible Router\n
      - 2.5gbs Unmaged Switch\n
      - 1gbs Unmaged Switch\n
      - QNAS with 2x2.5gbs NIC, running TrueNas\n
      - A few Rpis of different specs\n
      \n
      Questions\n
      =========\n
      \n
      #### Firewall\n
      \n
      My Main questions relate to the Firewall. It seems that pfsense is the way to go for a SW Firewall:\n
      \n
      - What HW should i use? would a Raspberry pi 4, 4GB RAM work?\n
      - What do you think of Netgear 1100?\n
      - I like this device since 3ports would allow me to create a physically separate DMZ\n
      - Should I consider other firewalls?\n
      \n
      #### NAS\n
      \n
      For Bonus Points, some questions regarding the NAS:\n
      \n
      - With my current diagram, it seems like it is not possible for the NAS to receive updates from the internet. The obvious change is to place the NAS within the DMZ, but I’d like to keep the Data Archive as far from the net as possible\n
      - Should i locate the entire NAS in the DMZ?\n
      - My TrueNas has 2x2.5Gb ports. Can i connect each NIC to a different network? Would this have any benefit?\n
      \n
      Thanks for your time!
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 7
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1728288680 {#2133
      date: 2024-10-07 10:11:20.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2040 …}
    +votes: Doctrine\ORM\PersistentCollection {#2349 …}
    +reports: Doctrine\ORM\PersistentCollection {#2141 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2164 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2314 …}
    +badges: Doctrine\ORM\PersistentCollection {#2328 …}
    +children: [
      App\Entity\EntryComment {#1692
        +user: App\Entity\User {#265
          +avatar: null
          +cover: null
          +email: "farcaller@fstab.sh"
          +username: "@farcaller@fstab.sh"
          +roles: []
          +followersCount: 0
          +homepage: "front"
          +about: "**beep ** bop."
          +lastActive: DateTime @1728288680 {#273
            date: 2024-10-07 10:11:20.0 +02:00
          }
          +markedForDeletionAt: null
          +fields: null
          +oauthGithubId: null
          +oauthGoogleId: null
          +oauthFacebookId: null
          +oauthKeycloakId: null
          +hideAdult: true
          +showSubscribedUsers: true
          +showSubscribedMagazines: true
          +showSubscribedDomains: true
          +preferredLanguages: []
          +featuredMagazines: null
          +showProfileSubscriptions: false
          +showProfileFollowings: true
          +markNewComments: false
          +notifyOnNewEntry: false
          +notifyOnNewEntryReply: true
          +notifyOnNewEntryCommentReply: true
          +notifyOnNewPost: false
          +notifyOnNewPostReply: true
          +notifyOnNewPostCommentReply: true
          +addMentionsEntries: false
          +addMentionsPosts: true
          +isBanned: false
          +isVerified: false
          +isDeleted: false
          +isBot: false
          +spamProtection: true
          +customCss: null
          +ignoreMagazinesCustomCss: false
          +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
          +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
          +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
          +entries: Doctrine\ORM\PersistentCollection {#196 …}
          +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
          +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
          +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
          +posts: Doctrine\ORM\PersistentCollection {#84 …}
          +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
          +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
          +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
          +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
          +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
          +follows: Doctrine\ORM\PersistentCollection {#1917 …}
          +followers: Doctrine\ORM\PersistentCollection {#1601 …}
          +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
          +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
          +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
          +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
          +reports: Doctrine\ORM\PersistentCollection {#1791 …}
          +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
          +violations: Doctrine\ORM\PersistentCollection {#1824 …}
          +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
          +awards: Doctrine\ORM\PersistentCollection {#1929 …}
          +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
          +categories: Doctrine\ORM\PersistentCollection {#1880 …}
          -id: 74862
          -password: "$2y$13$rWsJcMyA8J4LcXZtiU4zruNmsWAsmzSfqHZgkrrx/hgl43Co3oiu6"
          -totpSecret: null
          -totpBackupCodes: []
          -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
          +apId: "farcaller@fstab.sh"
          +apProfileId: "https://fstab.sh/u/farcaller"
          +apPublicUrl: "https://fstab.sh/u/farcaller"
          +apFollowersUrl: null
          +apInboxUrl: "https://fstab.sh/inbox"
          +apDomain: "fstab.sh"
          +apPreferredUsername: "farcaller"
          +apDiscoverable: true
          +apManuallyApprovesFollowers: false
          +privateKey: null
          +publicKey: null
          +apFetchedAt: DateTime @1700269471 {#274
            date: 2023-11-18 02:04:31.0 +01:00
          }
          +apDeletedAt: null
          +apTimeoutAt: null
          +visibility: "visible             "
          +createdAt: DateTimeImmutable @1699857340 {#268
            date: 2023-11-13 07:35:40.0 +01:00
          }
        }
        +entry: Proxies\__CG__\App\Entity\Entry {#1691 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1573 …2}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1686 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1689 …}
        +body: """
          I’ll make a note here that a firewall is useful for internal traffic, too. Those IoT devices can get pretty annoying, so you’d want to e.g. drop your cheap webcams into a VLAN and disallow them from talking to enjoying but their cloud, and especially the other VLANs, or isolate Alexa capable device so it won’t try to figure what else you got there in your house over mDNS (it will).\n
          \n
          A managed switch would do nicely. Having isolated ports on the switch (and the wifi AP) is also great if you want to make sure the specific device will only talk to the gateway and not its peers.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1706098966 {#1705
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@OpenTheSeaLegs@lemmyf.uk"
          "@atzanteol@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1680 …}
        +nested: Doctrine\ORM\PersistentCollection {#1683 …}
        +votes: Doctrine\ORM\PersistentCollection {#1702 …}
        +reports: Doctrine\ORM\PersistentCollection {#1596 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1613 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1621 …}
        -id: 336487
        -bodyTs: "'alexa':53 'also':92 'annoy':22 'ap':90 'capabl':54 'cheap':31 'cloud':45 'd':25 'devic':18,55,102 'disallow':37 'drop':29 'e.g':28 'els':64 'enjoy':42 'especi':47 'figur':62 'firewal':9 'gateway':108 'get':20 'got':66 'great':93 'hous':70 'intern':13 'iot':17 'isol':52,82 'll':2 'make':3,98 'manag':76 'mdns':72 'nice':80 'note':5 'peer':112 'port':83 'pretti':21 'specif':101 'sure':99 'switch':77,86 'talk':40,105 'traffic':14 'tri':60 'use':11 'vlan':35,50 'want':26,96 'webcam':32 'wifi':89 'won':58 'would':78"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://fstab.sh/comment/1504370"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706098966 {#1795
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +"title": 336487
      }
    ]
    -id: 32551
    -titleTs: "'design':3 'feedback':1 'firewal':5 'option':6"
    -bodyTs: "'/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':145 '1100':295 '1gbs':239 '2.5':235 '2x2.5gb':384 '2x2.5gbs':244 '3ports':301 '4':285 '4gb':286 'access':130,176 'achiev':142 'ago':23 'allow':303 'anyth':229 'arcan':89 'archiv':198,364 'around':9 'arr':211 'autom':184 'avail':230 'basic':52 'benefit':399 'bonus':318 'chang':347 'compat':233 'config':82 'connect':146,150,160,186,192,200,206,214,225,388 'consid':313 'consol':148 'continu':59 'cool':3 'creat':104,306 'creation':43 'current':327 'd':65,101,358 'data':53,197,363 'decid':57 'devic':123,157,171,299 'diagram':328 'differ':252,393 'dmz':110,310,355,380 'door':90 'entir':376 'face':41 'far':366 'fedivers':99 'figur':71 'firewal':62,126,255,262,275,315 'first':46 'flash':29 'gbs':236 'go':271 'got':25,50 'hardwar':231 'home':156,164,180,183,194,202,208,223 'homelab':47 'host':20,172 'hw':277 'internet':129,154,217,344 'iot':188 'jellybean':204,221 'keep':361 'kind':87 'lemmyf.uk':144 'lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':143 'like':66,102,297,331,359 'limit':128 'locat':374 'lurk':8 'machin':78 'main':257 'manag':120 'month':22 'much':228 'nas':28,170,219,316,324,338,352,377 'net':369 'netgear':294 'network':107,113,181,394 'nic':245,390 'obvious':346 'open':85 'openwrt':232 'pfsens':266 'physic':308 'pi':284 'place':350 'plan':115 'play':35,79 'point':319 'port':385 'possibl':335,371 'presum':220 'pretti':227 'printer':158 'project':4 'qnas':242 'question':254,258,321 'ram':287 'raspberri':283 'readi':39 'receiv':340 'recip':190 'regard':322 'relat':259 'router':234 'rpis':250 'run':246 'secur':70 'see':6 'seem':264,330 'self':19 'self-host':18 'separ':309 'servic':175 'setup':63 'sinc':48,300 'sketch':134 'spec':253 'spin':76 'stack':212 'standard':106 'start':34,75 'storag':54 'sw':274 'switch':238,241 'thank':400 'think':138,292 'thrown':12 'time':403 'today':36 'traffic':121 'truena':32,247,382 'turn':96 'tv':210 'unknown':93 'unmag':237,240 'unwit':84 'updat':341 'use':117,280 'vlan':118 'vms':173 'want':140 'way':269 'within':111,353 'wks':165,195,203,209,224 'work':55,288 'world':16 'would':281,302,395"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706084419
    +visibility: "visible             "
    +apId: "https://lemmyf.uk/post/4971341"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705999419 {#1737
      date: 2024-01-23 09:43:39.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  "dateAsUrl" => true
]

[
  "dateAsUrl" => true
]

App\Twig\Components\EntryComponent {#2956
  -authorizationChecker: Symfony\Component\Security\Core\Authorization\AuthorizationChecker {#931 …}
  -newCommentMarkerCount: App\Kbin\NewCommentMarker\NewCommentMarkerCount {#2957 …}
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
  -twig: Twig\Environment {#1252 …}
  -requestStack: Symfony\Component\HttpFoundation\RequestStack {#1328 …}
  -security: Symfony\Bundle\SecurityBundle\Security {#1101 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1691
    +user: Proxies\__CG__\App\Entity\User {#2411
      +avatar: null
      +cover: null
      +email: "OpenTheSeaLegs@lemmyf.uk"
      +username: "@OpenTheSeaLegs@lemmyf.uk"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728071407 {#3402
        date: 2024-10-04 21:50:07.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3407 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3410 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3412 …}
      +entries: Doctrine\ORM\PersistentCollection {#3414 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3416 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3418 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3420 …}
      +posts: Doctrine\ORM\PersistentCollection {#3422 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3424 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3426 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3428 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3430 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3432 …}
      +follows: Doctrine\ORM\PersistentCollection {#3434 …}
      +followers: Doctrine\ORM\PersistentCollection {#3436 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3438 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3440 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3442 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3444 …}
      +reports: Doctrine\ORM\PersistentCollection {#3446 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3448 …}
      +violations: Doctrine\ORM\PersistentCollection {#3450 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3452 …}
      +awards: Doctrine\ORM\PersistentCollection {#3454 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3456 …}
      +categories: Doctrine\ORM\PersistentCollection {#3458 …}
      -id: 71828
      -password: "$2y$13$n5hmw3iJuYOg0xMVUwK.1uUOBxcOsJkRP3G6R8QSqxFJV42Y.pV2W"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3460 …}
      +apId: "OpenTheSeaLegs@lemmyf.uk"
      +apProfileId: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apPublicUrl: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmyf.uk/inbox"
      +apDomain: "lemmyf.uk"
      +apPreferredUsername: "OpenTheSeaLegs"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729528414 {#3399
        date: 2024-10-21 18:33:34.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699177415 {#3401
        date: 2023-11-05 10:43:35.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1573
      +icon: Proxies\__CG__\App\Entity\Image {#3030 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#3009
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#3029 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#3027 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3032 …}
      +entries: Doctrine\ORM\PersistentCollection {#3033 …}
      +posts: Doctrine\ORM\PersistentCollection {#3036 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3038 …}
      +bans: Doctrine\ORM\PersistentCollection {#3044 …}
      +reports: Doctrine\ORM\PersistentCollection {#3052 …}
      +badges: Doctrine\ORM\PersistentCollection {#3065 …}
      +logs: Doctrine\ORM\PersistentCollection {#3075 …}
      +awards: Doctrine\ORM\PersistentCollection {#3057 …}
      +categories: Doctrine\ORM\PersistentCollection {#3081 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#3010
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#3011
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2013 …}
    +slug: "Feedback-on-Design-and-Firewall-Options"
    +title: "Feedback on Design and Firewall Options"
    +url: null
    +body: """
      All the cool projects I see while lurking around here have thrown me into the world of Self-Hosting! Some months ago I got myself a NAS, flashed it with TrueNAS and started playing. Today, I am ready to face the creation of my first homelab.\n
      \n
      Since I got the basic data storage working, I decided to continue with the Firewall setup. I’d like to have my security figured out before I start spinning up machines, playing with their configs and unwittingly opening all kind of arcane doors to the unknown. So I turn to the Fediverse!\n
      \n
      I’d like to create the standard network with a DMZ. Within the network, I plan to use VLANS to manage traffic between devices, and the firewall to limit internet access.\n
      \n
      This is a sketch of what I think I want to achieve:\n
      \n
      ![](https://lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)\n
      \n
      ### Connections\n
      \n
      - The Consoles will connect only to the internet\n
      - The Home Devices (printers) will connect only to the Home WKS\n
      - There will be a NAS device hosting VMs with services accessible only from the home network: \n
          - The Home Automation will connect to IoT\n
          - The Recipes will connect to Home Wks\n
          - The Data Archive will connect to Home Wks\n
          - Jellybean will connect to: \n
              - Home Wks\n
              - TV\n
          - *arr Stack will connect to: \n
              - The Internet\n
              - the NAS (presumably Jellybean)\n
      - The Home WKS connect to pretty much anything\n
      \n
      ### Available Hardware\n
      \n
      - OpenWRT compatible Router\n
      - 2.5gbs Unmaged Switch\n
      - 1gbs Unmaged Switch\n
      - QNAS with 2x2.5gbs NIC, running TrueNas\n
      - A few Rpis of different specs\n
      \n
      Questions\n
      =========\n
      \n
      #### Firewall\n
      \n
      My Main questions relate to the Firewall. It seems that pfsense is the way to go for a SW Firewall:\n
      \n
      - What HW should i use? would a Raspberry pi 4, 4GB RAM work?\n
      - What do you think of Netgear 1100?\n
      - I like this device since 3ports would allow me to create a physically separate DMZ\n
      - Should I consider other firewalls?\n
      \n
      #### NAS\n
      \n
      For Bonus Points, some questions regarding the NAS:\n
      \n
      - With my current diagram, it seems like it is not possible for the NAS to receive updates from the internet. The obvious change is to place the NAS within the DMZ, but I’d like to keep the Data Archive as far from the net as possible\n
      - Should i locate the entire NAS in the DMZ?\n
      - My TrueNas has 2x2.5Gb ports. Can i connect each NIC to a different network? Would this have any benefit?\n
      \n
      Thanks for your time!
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 7
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1728288680 {#2133
      date: 2024-10-07 10:11:20.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2040 …}
    +votes: Doctrine\ORM\PersistentCollection {#2349 …}
    +reports: Doctrine\ORM\PersistentCollection {#2141 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2164 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2314 …}
    +badges: Doctrine\ORM\PersistentCollection {#2328 …}
    +children: [
      App\Entity\EntryComment {#1692
        +user: App\Entity\User {#265
          +avatar: null
          +cover: null
          +email: "farcaller@fstab.sh"
          +username: "@farcaller@fstab.sh"
          +roles: []
          +followersCount: 0
          +homepage: "front"
          +about: "**beep ** bop."
          +lastActive: DateTime @1728288680 {#273
            date: 2024-10-07 10:11:20.0 +02:00
          }
          +markedForDeletionAt: null
          +fields: null
          +oauthGithubId: null
          +oauthGoogleId: null
          +oauthFacebookId: null
          +oauthKeycloakId: null
          +hideAdult: true
          +showSubscribedUsers: true
          +showSubscribedMagazines: true
          +showSubscribedDomains: true
          +preferredLanguages: []
          +featuredMagazines: null
          +showProfileSubscriptions: false
          +showProfileFollowings: true
          +markNewComments: false
          +notifyOnNewEntry: false
          +notifyOnNewEntryReply: true
          +notifyOnNewEntryCommentReply: true
          +notifyOnNewPost: false
          +notifyOnNewPostReply: true
          +notifyOnNewPostCommentReply: true
          +addMentionsEntries: false
          +addMentionsPosts: true
          +isBanned: false
          +isVerified: false
          +isDeleted: false
          +isBot: false
          +spamProtection: true
          +customCss: null
          +ignoreMagazinesCustomCss: false
          +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
          +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
          +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
          +entries: Doctrine\ORM\PersistentCollection {#196 …}
          +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
          +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
          +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
          +posts: Doctrine\ORM\PersistentCollection {#84 …}
          +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
          +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
          +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
          +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
          +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
          +follows: Doctrine\ORM\PersistentCollection {#1917 …}
          +followers: Doctrine\ORM\PersistentCollection {#1601 …}
          +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
          +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
          +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
          +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
          +reports: Doctrine\ORM\PersistentCollection {#1791 …}
          +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
          +violations: Doctrine\ORM\PersistentCollection {#1824 …}
          +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
          +awards: Doctrine\ORM\PersistentCollection {#1929 …}
          +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
          +categories: Doctrine\ORM\PersistentCollection {#1880 …}
          -id: 74862
          -password: "$2y$13$rWsJcMyA8J4LcXZtiU4zruNmsWAsmzSfqHZgkrrx/hgl43Co3oiu6"
          -totpSecret: null
          -totpBackupCodes: []
          -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
          +apId: "farcaller@fstab.sh"
          +apProfileId: "https://fstab.sh/u/farcaller"
          +apPublicUrl: "https://fstab.sh/u/farcaller"
          +apFollowersUrl: null
          +apInboxUrl: "https://fstab.sh/inbox"
          +apDomain: "fstab.sh"
          +apPreferredUsername: "farcaller"
          +apDiscoverable: true
          +apManuallyApprovesFollowers: false
          +privateKey: null
          +publicKey: null
          +apFetchedAt: DateTime @1700269471 {#274
            date: 2023-11-18 02:04:31.0 +01:00
          }
          +apDeletedAt: null
          +apTimeoutAt: null
          +visibility: "visible             "
          +createdAt: DateTimeImmutable @1699857340 {#268
            date: 2023-11-13 07:35:40.0 +01:00
          }
        }
        +entry: Proxies\__CG__\App\Entity\Entry {#1691 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1573 …2}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1686 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1689 …}
        +body: """
          I’ll make a note here that a firewall is useful for internal traffic, too. Those IoT devices can get pretty annoying, so you’d want to e.g. drop your cheap webcams into a VLAN and disallow them from talking to enjoying but their cloud, and especially the other VLANs, or isolate Alexa capable device so it won’t try to figure what else you got there in your house over mDNS (it will).\n
          \n
          A managed switch would do nicely. Having isolated ports on the switch (and the wifi AP) is also great if you want to make sure the specific device will only talk to the gateway and not its peers.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1706098966 {#1705
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@OpenTheSeaLegs@lemmyf.uk"
          "@atzanteol@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1680 …}
        +nested: Doctrine\ORM\PersistentCollection {#1683 …}
        +votes: Doctrine\ORM\PersistentCollection {#1702 …}
        +reports: Doctrine\ORM\PersistentCollection {#1596 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1613 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1621 …}
        -id: 336487
        -bodyTs: "'alexa':53 'also':92 'annoy':22 'ap':90 'capabl':54 'cheap':31 'cloud':45 'd':25 'devic':18,55,102 'disallow':37 'drop':29 'e.g':28 'els':64 'enjoy':42 'especi':47 'figur':62 'firewal':9 'gateway':108 'get':20 'got':66 'great':93 'hous':70 'intern':13 'iot':17 'isol':52,82 'll':2 'make':3,98 'manag':76 'mdns':72 'nice':80 'note':5 'peer':112 'port':83 'pretti':21 'specif':101 'sure':99 'switch':77,86 'talk':40,105 'traffic':14 'tri':60 'use':11 'vlan':35,50 'want':26,96 'webcam':32 'wifi':89 'won':58 'would':78"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://fstab.sh/comment/1504370"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706098966 {#1795
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +"title": 336487
      }
    ]
    -id: 32551
    -titleTs: "'design':3 'feedback':1 'firewal':5 'option':6"
    -bodyTs: "'/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':145 '1100':295 '1gbs':239 '2.5':235 '2x2.5gb':384 '2x2.5gbs':244 '3ports':301 '4':285 '4gb':286 'access':130,176 'achiev':142 'ago':23 'allow':303 'anyth':229 'arcan':89 'archiv':198,364 'around':9 'arr':211 'autom':184 'avail':230 'basic':52 'benefit':399 'bonus':318 'chang':347 'compat':233 'config':82 'connect':146,150,160,186,192,200,206,214,225,388 'consid':313 'consol':148 'continu':59 'cool':3 'creat':104,306 'creation':43 'current':327 'd':65,101,358 'data':53,197,363 'decid':57 'devic':123,157,171,299 'diagram':328 'differ':252,393 'dmz':110,310,355,380 'door':90 'entir':376 'face':41 'far':366 'fedivers':99 'figur':71 'firewal':62,126,255,262,275,315 'first':46 'flash':29 'gbs':236 'go':271 'got':25,50 'hardwar':231 'home':156,164,180,183,194,202,208,223 'homelab':47 'host':20,172 'hw':277 'internet':129,154,217,344 'iot':188 'jellybean':204,221 'keep':361 'kind':87 'lemmyf.uk':144 'lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':143 'like':66,102,297,331,359 'limit':128 'locat':374 'lurk':8 'machin':78 'main':257 'manag':120 'month':22 'much':228 'nas':28,170,219,316,324,338,352,377 'net':369 'netgear':294 'network':107,113,181,394 'nic':245,390 'obvious':346 'open':85 'openwrt':232 'pfsens':266 'physic':308 'pi':284 'place':350 'plan':115 'play':35,79 'point':319 'port':385 'possibl':335,371 'presum':220 'pretti':227 'printer':158 'project':4 'qnas':242 'question':254,258,321 'ram':287 'raspberri':283 'readi':39 'receiv':340 'recip':190 'regard':322 'relat':259 'router':234 'rpis':250 'run':246 'secur':70 'see':6 'seem':264,330 'self':19 'self-host':18 'separ':309 'servic':175 'setup':63 'sinc':48,300 'sketch':134 'spec':253 'spin':76 'stack':212 'standard':106 'start':34,75 'storag':54 'sw':274 'switch':238,241 'thank':400 'think':138,292 'thrown':12 'time':403 'today':36 'traffic':121 'truena':32,247,382 'turn':96 'tv':210 'unknown':93 'unmag':237,240 'unwit':84 'updat':341 'use':117,280 'vlan':118 'vms':173 'want':140 'way':269 'within':111,353 'wks':165,195,203,209,224 'work':55,288 'world':16 'would':281,302,395"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706084419
    +visibility: "visible             "
    +apId: "https://lemmyf.uk/post/4971341"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705999419 {#1737
      date: 2024-01-23 09:43:39.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +isSingle: false
  +showShortSentence: true
  +showBody: false
  +showMagazineName: true
  +canSeeTrash: false
  +newComments: 0
}

[
  "user" => Proxies\__CG__\App\Entity\User {#2411
    +avatar: null
    +cover: null
    +email: "OpenTheSeaLegs@lemmyf.uk"
    +username: "@OpenTheSeaLegs@lemmyf.uk"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728071407 {#3402
      date: 2024-10-04 21:50:07.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#3407 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3410 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#3412 …}
    +entries: Doctrine\ORM\PersistentCollection {#3414 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#3416 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#3418 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3420 …}
    +posts: Doctrine\ORM\PersistentCollection {#3422 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#3424 …}
    +postComments: Doctrine\ORM\PersistentCollection {#3426 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#3428 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#3430 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#3432 …}
    +follows: Doctrine\ORM\PersistentCollection {#3434 …}
    +followers: Doctrine\ORM\PersistentCollection {#3436 …}
    +blocks: Doctrine\ORM\PersistentCollection {#3438 …}
    +blockers: Doctrine\ORM\PersistentCollection {#3440 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#3442 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#3444 …}
    +reports: Doctrine\ORM\PersistentCollection {#3446 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3448 …}
    +violations: Doctrine\ORM\PersistentCollection {#3450 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3452 …}
    +awards: Doctrine\ORM\PersistentCollection {#3454 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#3456 …}
    +categories: Doctrine\ORM\PersistentCollection {#3458 …}
    -id: 71828
    -password: "$2y$13$n5hmw3iJuYOg0xMVUwK.1uUOBxcOsJkRP3G6R8QSqxFJV42Y.pV2W"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3460 …}
    +apId: "OpenTheSeaLegs@lemmyf.uk"
    +apProfileId: "https://lemmyf.uk/u/OpenTheSeaLegs"
    +apPublicUrl: "https://lemmyf.uk/u/OpenTheSeaLegs"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmyf.uk/inbox"
    +apDomain: "lemmyf.uk"
    +apPreferredUsername: "OpenTheSeaLegs"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729528414 {#3399
      date: 2024-10-21 18:33:34.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699177415 {#3401
      date: 2023-11-05 10:43:35.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  "showAvatar" => false
]

App\Twig\Components\UserInlineComponent {#3354
  +user: Proxies\__CG__\App\Entity\User {#2411
    +avatar: null
    +cover: null
    +email: "OpenTheSeaLegs@lemmyf.uk"
    +username: "@OpenTheSeaLegs@lemmyf.uk"
    +roles: []
    +followersCount: 0
    +homepage: "front"
    +about: null
    +lastActive: DateTime @1728071407 {#3402
      date: 2024-10-04 21:50:07.0 +02:00
    }
    +markedForDeletionAt: null
    +fields: null
    +oauthGithubId: null
    +oauthGoogleId: null
    +oauthFacebookId: null
    +oauthKeycloakId: null
    +hideAdult: true
    +showSubscribedUsers: true
    +showSubscribedMagazines: true
    +showSubscribedDomains: true
    +preferredLanguages: []
    +featuredMagazines: null
    +showProfileSubscriptions: false
    +showProfileFollowings: true
    +markNewComments: false
    +notifyOnNewEntry: false
    +notifyOnNewEntryReply: true
    +notifyOnNewEntryCommentReply: true
    +notifyOnNewPost: false
    +notifyOnNewPostReply: true
    +notifyOnNewPostCommentReply: true
    +addMentionsEntries: false
    +addMentionsPosts: true
    +isBanned: false
    +isVerified: false
    +isDeleted: false
    +isBot: false
    +spamProtection: true
    +customCss: null
    +ignoreMagazinesCustomCss: false
    +moderatorTokens: Doctrine\ORM\PersistentCollection {#3407 …}
    +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3410 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#3412 …}
    +entries: Doctrine\ORM\PersistentCollection {#3414 …}
    +entryVotes: Doctrine\ORM\PersistentCollection {#3416 …}
    +entryComments: Doctrine\ORM\PersistentCollection {#3418 …}
    +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3420 …}
    +posts: Doctrine\ORM\PersistentCollection {#3422 …}
    +postVotes: Doctrine\ORM\PersistentCollection {#3424 …}
    +postComments: Doctrine\ORM\PersistentCollection {#3426 …}
    +postCommentVotes: Doctrine\ORM\PersistentCollection {#3428 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#3430 …}
    +subscribedDomains: Doctrine\ORM\PersistentCollection {#3432 …}
    +follows: Doctrine\ORM\PersistentCollection {#3434 …}
    +followers: Doctrine\ORM\PersistentCollection {#3436 …}
    +blocks: Doctrine\ORM\PersistentCollection {#3438 …}
    +blockers: Doctrine\ORM\PersistentCollection {#3440 …}
    +blockedMagazines: Doctrine\ORM\PersistentCollection {#3442 …}
    +blockedDomains: Doctrine\ORM\PersistentCollection {#3444 …}
    +reports: Doctrine\ORM\PersistentCollection {#3446 …}
    +favourites: Doctrine\ORM\PersistentCollection {#3448 …}
    +violations: Doctrine\ORM\PersistentCollection {#3450 …}
    +notifications: Doctrine\ORM\PersistentCollection {#3452 …}
    +awards: Doctrine\ORM\PersistentCollection {#3454 …}
    +subscribedCategories: Doctrine\ORM\PersistentCollection {#3456 …}
    +categories: Doctrine\ORM\PersistentCollection {#3458 …}
    -id: 71828
    -password: "$2y$13$n5hmw3iJuYOg0xMVUwK.1uUOBxcOsJkRP3G6R8QSqxFJV42Y.pV2W"
    -totpSecret: null
    -totpBackupCodes: []
    -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3460 …}
    +apId: "OpenTheSeaLegs@lemmyf.uk"
    +apProfileId: "https://lemmyf.uk/u/OpenTheSeaLegs"
    +apPublicUrl: "https://lemmyf.uk/u/OpenTheSeaLegs"
    +apFollowersUrl: null
    +apInboxUrl: "https://lemmyf.uk/inbox"
    +apDomain: "lemmyf.uk"
    +apPreferredUsername: "OpenTheSeaLegs"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: false
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729528414 {#3399
      date: 2024-10-21 18:33:34.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699177415 {#3401
      date: 2023-11-05 10:43:35.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showAvatar: false
}

[
  "date" => DateTimeImmutable @1705999419 {#1737
    date: 2024-01-23 09:43:39.0 +01:00
  }
]

App\Twig\Components\DateComponent {#3482
  +date: DateTimeImmutable @1705999419 {#1737
    date: 2024-01-23 09:43:39.0 +01:00
  }
}

[
  "createdAt" => DateTimeImmutable @1705999419 {#1737
    date: 2024-01-23 09:43:39.0 +01:00
  }
  "editedAt" => null
]

App\Twig\Components\DateEditedComponent {#3546
  +createdAt: DateTimeImmutable @1705999419 {#1737
    date: 2024-01-23 09:43:39.0 +01:00
  }
  +editedAt: null
}

[
  "magazine" => Proxies\__CG__\App\Entity\Magazine {#1573
    +icon: Proxies\__CG__\App\Entity\Image {#3030 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#3009
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#3029 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#3027 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#3032 …}
    +entries: Doctrine\ORM\PersistentCollection {#3033 …}
    +posts: Doctrine\ORM\PersistentCollection {#3036 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#3038 …}
    +bans: Doctrine\ORM\PersistentCollection {#3044 …}
    +reports: Doctrine\ORM\PersistentCollection {#3052 …}
    +badges: Doctrine\ORM\PersistentCollection {#3065 …}
    +logs: Doctrine\ORM\PersistentCollection {#3075 …}
    +awards: Doctrine\ORM\PersistentCollection {#3057 …}
    +categories: Doctrine\ORM\PersistentCollection {#3081 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#3010
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#3011
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  "showAvatar" => false
]

App\Twig\Components\MagazineInlineComponent {#3611
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1573
    +icon: Proxies\__CG__\App\Entity\Image {#3030 …}
    +name: "selfhosted@lemmy.world"
    +title: "selfhosted"
    +description: """
      A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
      \n
      Rules:\n
      \n
      - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
      - No spam posting.\n
      - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
      - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
      - No trolling.\n
      \n
      Resources:\n
      \n
      - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
      - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
      - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
      \n
      > Any issues on the community? Report it using the report flag.\n
      \n
      > Questions? DM the mods!
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 222
    +entryCommentCount: 3916
    +postCount: 0
    +postCommentCount: 0
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582735 {#3009
      date: 2024-10-22 09:38:55.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#3029 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#3027 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#3032 …}
    +entries: Doctrine\ORM\PersistentCollection {#3033 …}
    +posts: Doctrine\ORM\PersistentCollection {#3036 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#3038 …}
    +bans: Doctrine\ORM\PersistentCollection {#3044 …}
    +reports: Doctrine\ORM\PersistentCollection {#3052 …}
    +badges: Doctrine\ORM\PersistentCollection {#3065 …}
    +logs: Doctrine\ORM\PersistentCollection {#3075 …}
    +awards: Doctrine\ORM\PersistentCollection {#3057 …}
    +categories: Doctrine\ORM\PersistentCollection {#3081 …}
    -id: 120
    +apId: "selfhosted@lemmy.world"
    +apProfileId: "https://lemmy.world/c/selfhosted"
    +apPublicUrl: "https://lemmy.world/c/selfhosted"
    +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
    +apInboxUrl: "https://lemmy.world/inbox"
    +apDomain: "lemmy.world"
    +apPreferredUsername: "selfhosted"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1703473826 {#3010
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1703473826 {#3011
      date: 2023-12-25 04:10:26.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +showTitle: true
  +fullName: false
  +stretchedLink: false
  +showAvatar: false
}

[
  "subject" => Proxies\__CG__\App\Entity\Entry {#1691
    +user: Proxies\__CG__\App\Entity\User {#2411
      +avatar: null
      +cover: null
      +email: "OpenTheSeaLegs@lemmyf.uk"
      +username: "@OpenTheSeaLegs@lemmyf.uk"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728071407 {#3402
        date: 2024-10-04 21:50:07.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3407 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3410 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3412 …}
      +entries: Doctrine\ORM\PersistentCollection {#3414 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3416 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3418 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3420 …}
      +posts: Doctrine\ORM\PersistentCollection {#3422 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3424 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3426 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3428 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3430 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3432 …}
      +follows: Doctrine\ORM\PersistentCollection {#3434 …}
      +followers: Doctrine\ORM\PersistentCollection {#3436 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3438 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3440 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3442 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3444 …}
      +reports: Doctrine\ORM\PersistentCollection {#3446 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3448 …}
      +violations: Doctrine\ORM\PersistentCollection {#3450 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3452 …}
      +awards: Doctrine\ORM\PersistentCollection {#3454 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3456 …}
      +categories: Doctrine\ORM\PersistentCollection {#3458 …}
      -id: 71828
      -password: "$2y$13$n5hmw3iJuYOg0xMVUwK.1uUOBxcOsJkRP3G6R8QSqxFJV42Y.pV2W"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3460 …}
      +apId: "OpenTheSeaLegs@lemmyf.uk"
      +apProfileId: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apPublicUrl: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmyf.uk/inbox"
      +apDomain: "lemmyf.uk"
      +apPreferredUsername: "OpenTheSeaLegs"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729528414 {#3399
        date: 2024-10-21 18:33:34.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699177415 {#3401
        date: 2023-11-05 10:43:35.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1573
      +icon: Proxies\__CG__\App\Entity\Image {#3030 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#3009
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#3029 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#3027 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3032 …}
      +entries: Doctrine\ORM\PersistentCollection {#3033 …}
      +posts: Doctrine\ORM\PersistentCollection {#3036 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3038 …}
      +bans: Doctrine\ORM\PersistentCollection {#3044 …}
      +reports: Doctrine\ORM\PersistentCollection {#3052 …}
      +badges: Doctrine\ORM\PersistentCollection {#3065 …}
      +logs: Doctrine\ORM\PersistentCollection {#3075 …}
      +awards: Doctrine\ORM\PersistentCollection {#3057 …}
      +categories: Doctrine\ORM\PersistentCollection {#3081 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#3010
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#3011
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2013 …}
    +slug: "Feedback-on-Design-and-Firewall-Options"
    +title: "Feedback on Design and Firewall Options"
    +url: null
    +body: """
      All the cool projects I see while lurking around here have thrown me into the world of Self-Hosting! Some months ago I got myself a NAS, flashed it with TrueNAS and started playing. Today, I am ready to face the creation of my first homelab.\n
      \n
      Since I got the basic data storage working, I decided to continue with the Firewall setup. I’d like to have my security figured out before I start spinning up machines, playing with their configs and unwittingly opening all kind of arcane doors to the unknown. So I turn to the Fediverse!\n
      \n
      I’d like to create the standard network with a DMZ. Within the network, I plan to use VLANS to manage traffic between devices, and the firewall to limit internet access.\n
      \n
      This is a sketch of what I think I want to achieve:\n
      \n
      ![](https://lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)\n
      \n
      ### Connections\n
      \n
      - The Consoles will connect only to the internet\n
      - The Home Devices (printers) will connect only to the Home WKS\n
      - There will be a NAS device hosting VMs with services accessible only from the home network: \n
          - The Home Automation will connect to IoT\n
          - The Recipes will connect to Home Wks\n
          - The Data Archive will connect to Home Wks\n
          - Jellybean will connect to: \n
              - Home Wks\n
              - TV\n
          - *arr Stack will connect to: \n
              - The Internet\n
              - the NAS (presumably Jellybean)\n
      - The Home WKS connect to pretty much anything\n
      \n
      ### Available Hardware\n
      \n
      - OpenWRT compatible Router\n
      - 2.5gbs Unmaged Switch\n
      - 1gbs Unmaged Switch\n
      - QNAS with 2x2.5gbs NIC, running TrueNas\n
      - A few Rpis of different specs\n
      \n
      Questions\n
      =========\n
      \n
      #### Firewall\n
      \n
      My Main questions relate to the Firewall. It seems that pfsense is the way to go for a SW Firewall:\n
      \n
      - What HW should i use? would a Raspberry pi 4, 4GB RAM work?\n
      - What do you think of Netgear 1100?\n
      - I like this device since 3ports would allow me to create a physically separate DMZ\n
      - Should I consider other firewalls?\n
      \n
      #### NAS\n
      \n
      For Bonus Points, some questions regarding the NAS:\n
      \n
      - With my current diagram, it seems like it is not possible for the NAS to receive updates from the internet. The obvious change is to place the NAS within the DMZ, but I’d like to keep the Data Archive as far from the net as possible\n
      - Should i locate the entire NAS in the DMZ?\n
      - My TrueNas has 2x2.5Gb ports. Can i connect each NIC to a different network? Would this have any benefit?\n
      \n
      Thanks for your time!
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 7
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1728288680 {#2133
      date: 2024-10-07 10:11:20.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2040 …}
    +votes: Doctrine\ORM\PersistentCollection {#2349 …}
    +reports: Doctrine\ORM\PersistentCollection {#2141 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2164 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2314 …}
    +badges: Doctrine\ORM\PersistentCollection {#2328 …}
    +children: [
      App\Entity\EntryComment {#1692
        +user: App\Entity\User {#265
          +avatar: null
          +cover: null
          +email: "farcaller@fstab.sh"
          +username: "@farcaller@fstab.sh"
          +roles: []
          +followersCount: 0
          +homepage: "front"
          +about: "**beep ** bop."
          +lastActive: DateTime @1728288680 {#273
            date: 2024-10-07 10:11:20.0 +02:00
          }
          +markedForDeletionAt: null
          +fields: null
          +oauthGithubId: null
          +oauthGoogleId: null
          +oauthFacebookId: null
          +oauthKeycloakId: null
          +hideAdult: true
          +showSubscribedUsers: true
          +showSubscribedMagazines: true
          +showSubscribedDomains: true
          +preferredLanguages: []
          +featuredMagazines: null
          +showProfileSubscriptions: false
          +showProfileFollowings: true
          +markNewComments: false
          +notifyOnNewEntry: false
          +notifyOnNewEntryReply: true
          +notifyOnNewEntryCommentReply: true
          +notifyOnNewPost: false
          +notifyOnNewPostReply: true
          +notifyOnNewPostCommentReply: true
          +addMentionsEntries: false
          +addMentionsPosts: true
          +isBanned: false
          +isVerified: false
          +isDeleted: false
          +isBot: false
          +spamProtection: true
          +customCss: null
          +ignoreMagazinesCustomCss: false
          +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
          +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
          +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
          +entries: Doctrine\ORM\PersistentCollection {#196 …}
          +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
          +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
          +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
          +posts: Doctrine\ORM\PersistentCollection {#84 …}
          +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
          +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
          +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
          +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
          +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
          +follows: Doctrine\ORM\PersistentCollection {#1917 …}
          +followers: Doctrine\ORM\PersistentCollection {#1601 …}
          +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
          +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
          +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
          +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
          +reports: Doctrine\ORM\PersistentCollection {#1791 …}
          +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
          +violations: Doctrine\ORM\PersistentCollection {#1824 …}
          +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
          +awards: Doctrine\ORM\PersistentCollection {#1929 …}
          +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
          +categories: Doctrine\ORM\PersistentCollection {#1880 …}
          -id: 74862
          -password: "$2y$13$rWsJcMyA8J4LcXZtiU4zruNmsWAsmzSfqHZgkrrx/hgl43Co3oiu6"
          -totpSecret: null
          -totpBackupCodes: []
          -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
          +apId: "farcaller@fstab.sh"
          +apProfileId: "https://fstab.sh/u/farcaller"
          +apPublicUrl: "https://fstab.sh/u/farcaller"
          +apFollowersUrl: null
          +apInboxUrl: "https://fstab.sh/inbox"
          +apDomain: "fstab.sh"
          +apPreferredUsername: "farcaller"
          +apDiscoverable: true
          +apManuallyApprovesFollowers: false
          +privateKey: null
          +publicKey: null
          +apFetchedAt: DateTime @1700269471 {#274
            date: 2023-11-18 02:04:31.0 +01:00
          }
          +apDeletedAt: null
          +apTimeoutAt: null
          +visibility: "visible             "
          +createdAt: DateTimeImmutable @1699857340 {#268
            date: 2023-11-13 07:35:40.0 +01:00
          }
        }
        +entry: Proxies\__CG__\App\Entity\Entry {#1691 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1573 …2}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1686 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1689 …}
        +body: """
          I’ll make a note here that a firewall is useful for internal traffic, too. Those IoT devices can get pretty annoying, so you’d want to e.g. drop your cheap webcams into a VLAN and disallow them from talking to enjoying but their cloud, and especially the other VLANs, or isolate Alexa capable device so it won’t try to figure what else you got there in your house over mDNS (it will).\n
          \n
          A managed switch would do nicely. Having isolated ports on the switch (and the wifi AP) is also great if you want to make sure the specific device will only talk to the gateway and not its peers.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1706098966 {#1705
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@OpenTheSeaLegs@lemmyf.uk"
          "@atzanteol@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1680 …}
        +nested: Doctrine\ORM\PersistentCollection {#1683 …}
        +votes: Doctrine\ORM\PersistentCollection {#1702 …}
        +reports: Doctrine\ORM\PersistentCollection {#1596 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1613 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1621 …}
        -id: 336487
        -bodyTs: "'alexa':53 'also':92 'annoy':22 'ap':90 'capabl':54 'cheap':31 'cloud':45 'd':25 'devic':18,55,102 'disallow':37 'drop':29 'e.g':28 'els':64 'enjoy':42 'especi':47 'figur':62 'firewal':9 'gateway':108 'get':20 'got':66 'great':93 'hous':70 'intern':13 'iot':17 'isol':52,82 'll':2 'make':3,98 'manag':76 'mdns':72 'nice':80 'note':5 'peer':112 'port':83 'pretti':21 'specif':101 'sure':99 'switch':77,86 'talk':40,105 'traffic':14 'tri':60 'use':11 'vlan':35,50 'want':26,96 'webcam':32 'wifi':89 'won':58 'would':78"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://fstab.sh/comment/1504370"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706098966 {#1795
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +"title": 336487
      }
    ]
    -id: 32551
    -titleTs: "'design':3 'feedback':1 'firewal':5 'option':6"
    -bodyTs: "'/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':145 '1100':295 '1gbs':239 '2.5':235 '2x2.5gb':384 '2x2.5gbs':244 '3ports':301 '4':285 '4gb':286 'access':130,176 'achiev':142 'ago':23 'allow':303 'anyth':229 'arcan':89 'archiv':198,364 'around':9 'arr':211 'autom':184 'avail':230 'basic':52 'benefit':399 'bonus':318 'chang':347 'compat':233 'config':82 'connect':146,150,160,186,192,200,206,214,225,388 'consid':313 'consol':148 'continu':59 'cool':3 'creat':104,306 'creation':43 'current':327 'd':65,101,358 'data':53,197,363 'decid':57 'devic':123,157,171,299 'diagram':328 'differ':252,393 'dmz':110,310,355,380 'door':90 'entir':376 'face':41 'far':366 'fedivers':99 'figur':71 'firewal':62,126,255,262,275,315 'first':46 'flash':29 'gbs':236 'go':271 'got':25,50 'hardwar':231 'home':156,164,180,183,194,202,208,223 'homelab':47 'host':20,172 'hw':277 'internet':129,154,217,344 'iot':188 'jellybean':204,221 'keep':361 'kind':87 'lemmyf.uk':144 'lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':143 'like':66,102,297,331,359 'limit':128 'locat':374 'lurk':8 'machin':78 'main':257 'manag':120 'month':22 'much':228 'nas':28,170,219,316,324,338,352,377 'net':369 'netgear':294 'network':107,113,181,394 'nic':245,390 'obvious':346 'open':85 'openwrt':232 'pfsens':266 'physic':308 'pi':284 'place':350 'plan':115 'play':35,79 'point':319 'port':385 'possibl':335,371 'presum':220 'pretti':227 'printer':158 'project':4 'qnas':242 'question':254,258,321 'ram':287 'raspberri':283 'readi':39 'receiv':340 'recip':190 'regard':322 'relat':259 'router':234 'rpis':250 'run':246 'secur':70 'see':6 'seem':264,330 'self':19 'self-host':18 'separ':309 'servic':175 'setup':63 'sinc':48,300 'sketch':134 'spec':253 'spin':76 'stack':212 'standard':106 'start':34,75 'storag':54 'sw':274 'switch':238,241 'thank':400 'think':138,292 'thrown':12 'time':403 'today':36 'traffic':121 'truena':32,247,382 'turn':96 'tv':210 'unknown':93 'unmag':237,240 'unwit':84 'updat':341 'use':117,280 'vlan':118 'vms':173 'want':140 'way':269 'within':111,353 'wks':165,195,203,209,224 'work':55,288 'world':16 'would':281,302,395"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706084419
    +visibility: "visible             "
    +apId: "https://lemmyf.uk/post/4971341"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705999419 {#1737
      date: 2024-01-23 09:43:39.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]

App\Twig\Components\VoteComponent {#3677
  +subject: Proxies\__CG__\App\Entity\Entry {#1691
    +user: Proxies\__CG__\App\Entity\User {#2411
      +avatar: null
      +cover: null
      +email: "OpenTheSeaLegs@lemmyf.uk"
      +username: "@OpenTheSeaLegs@lemmyf.uk"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728071407 {#3402
        date: 2024-10-04 21:50:07.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3407 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3410 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3412 …}
      +entries: Doctrine\ORM\PersistentCollection {#3414 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3416 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3418 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3420 …}
      +posts: Doctrine\ORM\PersistentCollection {#3422 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3424 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3426 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3428 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3430 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3432 …}
      +follows: Doctrine\ORM\PersistentCollection {#3434 …}
      +followers: Doctrine\ORM\PersistentCollection {#3436 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3438 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3440 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3442 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3444 …}
      +reports: Doctrine\ORM\PersistentCollection {#3446 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3448 …}
      +violations: Doctrine\ORM\PersistentCollection {#3450 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3452 …}
      +awards: Doctrine\ORM\PersistentCollection {#3454 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3456 …}
      +categories: Doctrine\ORM\PersistentCollection {#3458 …}
      -id: 71828
      -password: "$2y$13$n5hmw3iJuYOg0xMVUwK.1uUOBxcOsJkRP3G6R8QSqxFJV42Y.pV2W"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3460 …}
      +apId: "OpenTheSeaLegs@lemmyf.uk"
      +apProfileId: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apPublicUrl: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmyf.uk/inbox"
      +apDomain: "lemmyf.uk"
      +apPreferredUsername: "OpenTheSeaLegs"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729528414 {#3399
        date: 2024-10-21 18:33:34.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699177415 {#3401
        date: 2023-11-05 10:43:35.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1573
      +icon: Proxies\__CG__\App\Entity\Image {#3030 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#3009
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#3029 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#3027 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3032 …}
      +entries: Doctrine\ORM\PersistentCollection {#3033 …}
      +posts: Doctrine\ORM\PersistentCollection {#3036 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3038 …}
      +bans: Doctrine\ORM\PersistentCollection {#3044 …}
      +reports: Doctrine\ORM\PersistentCollection {#3052 …}
      +badges: Doctrine\ORM\PersistentCollection {#3065 …}
      +logs: Doctrine\ORM\PersistentCollection {#3075 …}
      +awards: Doctrine\ORM\PersistentCollection {#3057 …}
      +categories: Doctrine\ORM\PersistentCollection {#3081 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#3010
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#3011
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2013 …}
    +slug: "Feedback-on-Design-and-Firewall-Options"
    +title: "Feedback on Design and Firewall Options"
    +url: null
    +body: """
      All the cool projects I see while lurking around here have thrown me into the world of Self-Hosting! Some months ago I got myself a NAS, flashed it with TrueNAS and started playing. Today, I am ready to face the creation of my first homelab.\n
      \n
      Since I got the basic data storage working, I decided to continue with the Firewall setup. I’d like to have my security figured out before I start spinning up machines, playing with their configs and unwittingly opening all kind of arcane doors to the unknown. So I turn to the Fediverse!\n
      \n
      I’d like to create the standard network with a DMZ. Within the network, I plan to use VLANS to manage traffic between devices, and the firewall to limit internet access.\n
      \n
      This is a sketch of what I think I want to achieve:\n
      \n
      ![](https://lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)\n
      \n
      ### Connections\n
      \n
      - The Consoles will connect only to the internet\n
      - The Home Devices (printers) will connect only to the Home WKS\n
      - There will be a NAS device hosting VMs with services accessible only from the home network: \n
          - The Home Automation will connect to IoT\n
          - The Recipes will connect to Home Wks\n
          - The Data Archive will connect to Home Wks\n
          - Jellybean will connect to: \n
              - Home Wks\n
              - TV\n
          - *arr Stack will connect to: \n
              - The Internet\n
              - the NAS (presumably Jellybean)\n
      - The Home WKS connect to pretty much anything\n
      \n
      ### Available Hardware\n
      \n
      - OpenWRT compatible Router\n
      - 2.5gbs Unmaged Switch\n
      - 1gbs Unmaged Switch\n
      - QNAS with 2x2.5gbs NIC, running TrueNas\n
      - A few Rpis of different specs\n
      \n
      Questions\n
      =========\n
      \n
      #### Firewall\n
      \n
      My Main questions relate to the Firewall. It seems that pfsense is the way to go for a SW Firewall:\n
      \n
      - What HW should i use? would a Raspberry pi 4, 4GB RAM work?\n
      - What do you think of Netgear 1100?\n
      - I like this device since 3ports would allow me to create a physically separate DMZ\n
      - Should I consider other firewalls?\n
      \n
      #### NAS\n
      \n
      For Bonus Points, some questions regarding the NAS:\n
      \n
      - With my current diagram, it seems like it is not possible for the NAS to receive updates from the internet. The obvious change is to place the NAS within the DMZ, but I’d like to keep the Data Archive as far from the net as possible\n
      - Should i locate the entire NAS in the DMZ?\n
      - My TrueNas has 2x2.5Gb ports. Can i connect each NIC to a different network? Would this have any benefit?\n
      \n
      Thanks for your time!
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 7
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1728288680 {#2133
      date: 2024-10-07 10:11:20.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2040 …}
    +votes: Doctrine\ORM\PersistentCollection {#2349 …}
    +reports: Doctrine\ORM\PersistentCollection {#2141 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2164 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2314 …}
    +badges: Doctrine\ORM\PersistentCollection {#2328 …}
    +children: [
      App\Entity\EntryComment {#1692
        +user: App\Entity\User {#265
          +avatar: null
          +cover: null
          +email: "farcaller@fstab.sh"
          +username: "@farcaller@fstab.sh"
          +roles: []
          +followersCount: 0
          +homepage: "front"
          +about: "**beep ** bop."
          +lastActive: DateTime @1728288680 {#273
            date: 2024-10-07 10:11:20.0 +02:00
          }
          +markedForDeletionAt: null
          +fields: null
          +oauthGithubId: null
          +oauthGoogleId: null
          +oauthFacebookId: null
          +oauthKeycloakId: null
          +hideAdult: true
          +showSubscribedUsers: true
          +showSubscribedMagazines: true
          +showSubscribedDomains: true
          +preferredLanguages: []
          +featuredMagazines: null
          +showProfileSubscriptions: false
          +showProfileFollowings: true
          +markNewComments: false
          +notifyOnNewEntry: false
          +notifyOnNewEntryReply: true
          +notifyOnNewEntryCommentReply: true
          +notifyOnNewPost: false
          +notifyOnNewPostReply: true
          +notifyOnNewPostCommentReply: true
          +addMentionsEntries: false
          +addMentionsPosts: true
          +isBanned: false
          +isVerified: false
          +isDeleted: false
          +isBot: false
          +spamProtection: true
          +customCss: null
          +ignoreMagazinesCustomCss: false
          +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
          +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
          +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
          +entries: Doctrine\ORM\PersistentCollection {#196 …}
          +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
          +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
          +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
          +posts: Doctrine\ORM\PersistentCollection {#84 …}
          +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
          +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
          +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
          +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
          +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
          +follows: Doctrine\ORM\PersistentCollection {#1917 …}
          +followers: Doctrine\ORM\PersistentCollection {#1601 …}
          +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
          +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
          +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
          +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
          +reports: Doctrine\ORM\PersistentCollection {#1791 …}
          +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
          +violations: Doctrine\ORM\PersistentCollection {#1824 …}
          +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
          +awards: Doctrine\ORM\PersistentCollection {#1929 …}
          +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
          +categories: Doctrine\ORM\PersistentCollection {#1880 …}
          -id: 74862
          -password: "$2y$13$rWsJcMyA8J4LcXZtiU4zruNmsWAsmzSfqHZgkrrx/hgl43Co3oiu6"
          -totpSecret: null
          -totpBackupCodes: []
          -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
          +apId: "farcaller@fstab.sh"
          +apProfileId: "https://fstab.sh/u/farcaller"
          +apPublicUrl: "https://fstab.sh/u/farcaller"
          +apFollowersUrl: null
          +apInboxUrl: "https://fstab.sh/inbox"
          +apDomain: "fstab.sh"
          +apPreferredUsername: "farcaller"
          +apDiscoverable: true
          +apManuallyApprovesFollowers: false
          +privateKey: null
          +publicKey: null
          +apFetchedAt: DateTime @1700269471 {#274
            date: 2023-11-18 02:04:31.0 +01:00
          }
          +apDeletedAt: null
          +apTimeoutAt: null
          +visibility: "visible             "
          +createdAt: DateTimeImmutable @1699857340 {#268
            date: 2023-11-13 07:35:40.0 +01:00
          }
        }
        +entry: Proxies\__CG__\App\Entity\Entry {#1691 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1573 …2}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1686 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1689 …}
        +body: """
          I’ll make a note here that a firewall is useful for internal traffic, too. Those IoT devices can get pretty annoying, so you’d want to e.g. drop your cheap webcams into a VLAN and disallow them from talking to enjoying but their cloud, and especially the other VLANs, or isolate Alexa capable device so it won’t try to figure what else you got there in your house over mDNS (it will).\n
          \n
          A managed switch would do nicely. Having isolated ports on the switch (and the wifi AP) is also great if you want to make sure the specific device will only talk to the gateway and not its peers.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1706098966 {#1705
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@OpenTheSeaLegs@lemmyf.uk"
          "@atzanteol@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1680 …}
        +nested: Doctrine\ORM\PersistentCollection {#1683 …}
        +votes: Doctrine\ORM\PersistentCollection {#1702 …}
        +reports: Doctrine\ORM\PersistentCollection {#1596 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1613 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1621 …}
        -id: 336487
        -bodyTs: "'alexa':53 'also':92 'annoy':22 'ap':90 'capabl':54 'cheap':31 'cloud':45 'd':25 'devic':18,55,102 'disallow':37 'drop':29 'e.g':28 'els':64 'enjoy':42 'especi':47 'figur':62 'firewal':9 'gateway':108 'get':20 'got':66 'great':93 'hous':70 'intern':13 'iot':17 'isol':52,82 'll':2 'make':3,98 'manag':76 'mdns':72 'nice':80 'note':5 'peer':112 'port':83 'pretti':21 'specif':101 'sure':99 'switch':77,86 'talk':40,105 'traffic':14 'tri':60 'use':11 'vlan':35,50 'want':26,96 'webcam':32 'wifi':89 'won':58 'would':78"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://fstab.sh/comment/1504370"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706098966 {#1795
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +"title": 336487
      }
    ]
    -id: 32551
    -titleTs: "'design':3 'feedback':1 'firewal':5 'option':6"
    -bodyTs: "'/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':145 '1100':295 '1gbs':239 '2.5':235 '2x2.5gb':384 '2x2.5gbs':244 '3ports':301 '4':285 '4gb':286 'access':130,176 'achiev':142 'ago':23 'allow':303 'anyth':229 'arcan':89 'archiv':198,364 'around':9 'arr':211 'autom':184 'avail':230 'basic':52 'benefit':399 'bonus':318 'chang':347 'compat':233 'config':82 'connect':146,150,160,186,192,200,206,214,225,388 'consid':313 'consol':148 'continu':59 'cool':3 'creat':104,306 'creation':43 'current':327 'd':65,101,358 'data':53,197,363 'decid':57 'devic':123,157,171,299 'diagram':328 'differ':252,393 'dmz':110,310,355,380 'door':90 'entir':376 'face':41 'far':366 'fedivers':99 'figur':71 'firewal':62,126,255,262,275,315 'first':46 'flash':29 'gbs':236 'go':271 'got':25,50 'hardwar':231 'home':156,164,180,183,194,202,208,223 'homelab':47 'host':20,172 'hw':277 'internet':129,154,217,344 'iot':188 'jellybean':204,221 'keep':361 'kind':87 'lemmyf.uk':144 'lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':143 'like':66,102,297,331,359 'limit':128 'locat':374 'lurk':8 'machin':78 'main':257 'manag':120 'month':22 'much':228 'nas':28,170,219,316,324,338,352,377 'net':369 'netgear':294 'network':107,113,181,394 'nic':245,390 'obvious':346 'open':85 'openwrt':232 'pfsens':266 'physic':308 'pi':284 'place':350 'plan':115 'play':35,79 'point':319 'port':385 'possibl':335,371 'presum':220 'pretti':227 'printer':158 'project':4 'qnas':242 'question':254,258,321 'ram':287 'raspberri':283 'readi':39 'receiv':340 'recip':190 'regard':322 'relat':259 'router':234 'rpis':250 'run':246 'secur':70 'see':6 'seem':264,330 'self':19 'self-host':18 'separ':309 'servic':175 'setup':63 'sinc':48,300 'sketch':134 'spec':253 'spin':76 'stack':212 'standard':106 'start':34,75 'storag':54 'sw':274 'switch':238,241 'thank':400 'think':138,292 'thrown':12 'time':403 'today':36 'traffic':121 'truena':32,247,382 'turn':96 'tv':210 'unknown':93 'unmag':237,240 'unwit':84 'updat':341 'use':117,280 'vlan':118 'vms':173 'want':140 'way':269 'within':111,353 'wks':165,195,203,209,224 'work':55,288 'world':16 'would':281,302,395"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706084419
    +visibility: "visible             "
    +apId: "https://lemmyf.uk/post/4971341"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705999419 {#1737
      date: 2024-01-23 09:43:39.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +formDest: "entry"
  +showDownvote: true
  -cache: Symfony\Component\Cache\Adapter\TraceableTagAwareAdapter {#600 …}
}

[
  "subject" => Proxies\__CG__\App\Entity\Entry {#1691
    +user: Proxies\__CG__\App\Entity\User {#2411
      +avatar: null
      +cover: null
      +email: "OpenTheSeaLegs@lemmyf.uk"
      +username: "@OpenTheSeaLegs@lemmyf.uk"
      +roles: []
      +followersCount: 0
      +homepage: "front"
      +about: null
      +lastActive: DateTime @1728071407 {#3402
        date: 2024-10-04 21:50:07.0 +02:00
      }
      +markedForDeletionAt: null
      +fields: null
      +oauthGithubId: null
      +oauthGoogleId: null
      +oauthFacebookId: null
      +oauthKeycloakId: null
      +hideAdult: true
      +showSubscribedUsers: true
      +showSubscribedMagazines: true
      +showSubscribedDomains: true
      +preferredLanguages: []
      +featuredMagazines: null
      +showProfileSubscriptions: false
      +showProfileFollowings: true
      +markNewComments: false
      +notifyOnNewEntry: false
      +notifyOnNewEntryReply: true
      +notifyOnNewEntryCommentReply: true
      +notifyOnNewPost: false
      +notifyOnNewPostReply: true
      +notifyOnNewPostCommentReply: true
      +addMentionsEntries: false
      +addMentionsPosts: true
      +isBanned: false
      +isVerified: false
      +isDeleted: false
      +isBot: false
      +spamProtection: true
      +customCss: null
      +ignoreMagazinesCustomCss: false
      +moderatorTokens: Doctrine\ORM\PersistentCollection {#3407 …}
      +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#3410 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3412 …}
      +entries: Doctrine\ORM\PersistentCollection {#3414 …}
      +entryVotes: Doctrine\ORM\PersistentCollection {#3416 …}
      +entryComments: Doctrine\ORM\PersistentCollection {#3418 …}
      +entryCommentVotes: Doctrine\ORM\PersistentCollection {#3420 …}
      +posts: Doctrine\ORM\PersistentCollection {#3422 …}
      +postVotes: Doctrine\ORM\PersistentCollection {#3424 …}
      +postComments: Doctrine\ORM\PersistentCollection {#3426 …}
      +postCommentVotes: Doctrine\ORM\PersistentCollection {#3428 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3430 …}
      +subscribedDomains: Doctrine\ORM\PersistentCollection {#3432 …}
      +follows: Doctrine\ORM\PersistentCollection {#3434 …}
      +followers: Doctrine\ORM\PersistentCollection {#3436 …}
      +blocks: Doctrine\ORM\PersistentCollection {#3438 …}
      +blockers: Doctrine\ORM\PersistentCollection {#3440 …}
      +blockedMagazines: Doctrine\ORM\PersistentCollection {#3442 …}
      +blockedDomains: Doctrine\ORM\PersistentCollection {#3444 …}
      +reports: Doctrine\ORM\PersistentCollection {#3446 …}
      +favourites: Doctrine\ORM\PersistentCollection {#3448 …}
      +violations: Doctrine\ORM\PersistentCollection {#3450 …}
      +notifications: Doctrine\ORM\PersistentCollection {#3452 …}
      +awards: Doctrine\ORM\PersistentCollection {#3454 …}
      +subscribedCategories: Doctrine\ORM\PersistentCollection {#3456 …}
      +categories: Doctrine\ORM\PersistentCollection {#3458 …}
      -id: 71828
      -password: "$2y$13$n5hmw3iJuYOg0xMVUwK.1uUOBxcOsJkRP3G6R8QSqxFJV42Y.pV2W"
      -totpSecret: null
      -totpBackupCodes: []
      -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#3460 …}
      +apId: "OpenTheSeaLegs@lemmyf.uk"
      +apProfileId: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apPublicUrl: "https://lemmyf.uk/u/OpenTheSeaLegs"
      +apFollowersUrl: null
      +apInboxUrl: "https://lemmyf.uk/inbox"
      +apDomain: "lemmyf.uk"
      +apPreferredUsername: "OpenTheSeaLegs"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: false
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1729528414 {#3399
        date: 2024-10-21 18:33:34.0 +02:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1699177415 {#3401
        date: 2023-11-05 10:43:35.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1573
      +icon: Proxies\__CG__\App\Entity\Image {#3030 …}
      +name: "selfhosted@lemmy.world"
      +title: "selfhosted"
      +description: """
        A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don’t control.\n
        \n
        Rules:\n
        \n
        - Be civil: we’re here to support and learn from one another. Insults won’t be tolerated. Flame wars are frowned upon.\n
        - No spam posting.\n
        - Don’t duplicate the full text of your blog or github here. Just post the link for folks to click.\n
        - Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).\n
        - No trolling.\n
        \n
        Resources:\n
        \n
        - [awesome-selfhosted software](https://github.com/awesome-selfhosted/awesome-selfhosted)\n
        - [awesome-sysadmin](https://github.com/awesome-foss/awesome-sysadmin) resources\n
        - [Self-Hosted Podcast from Jupiter Broadcasting](https://selfhosted.show)\n
        \n
        > Any issues on the community? Report it using the report flag.\n
        \n
        > Questions? DM the mods!
        """
      +rules: null
      +subscriptionsCount: 1
      +entryCount: 222
      +entryCommentCount: 3916
      +postCount: 0
      +postCommentCount: 0
      +isAdult: false
      +customCss: null
      +lastActive: DateTime @1729582735 {#3009
        date: 2024-10-22 09:38:55.0 +02:00
      }
      +markedForDeletionAt: null
      +tags: null
      +moderators: Doctrine\ORM\PersistentCollection {#3029 …}
      +ownershipRequests: Doctrine\ORM\PersistentCollection {#3027 …}
      +moderatorRequests: Doctrine\ORM\PersistentCollection {#3032 …}
      +entries: Doctrine\ORM\PersistentCollection {#3033 …}
      +posts: Doctrine\ORM\PersistentCollection {#3036 …}
      +subscriptions: Doctrine\ORM\PersistentCollection {#3038 …}
      +bans: Doctrine\ORM\PersistentCollection {#3044 …}
      +reports: Doctrine\ORM\PersistentCollection {#3052 …}
      +badges: Doctrine\ORM\PersistentCollection {#3065 …}
      +logs: Doctrine\ORM\PersistentCollection {#3075 …}
      +awards: Doctrine\ORM\PersistentCollection {#3057 …}
      +categories: Doctrine\ORM\PersistentCollection {#3081 …}
      -id: 120
      +apId: "selfhosted@lemmy.world"
      +apProfileId: "https://lemmy.world/c/selfhosted"
      +apPublicUrl: "https://lemmy.world/c/selfhosted"
      +apFollowersUrl: "https://lemmy.world/c/selfhosted/followers"
      +apInboxUrl: "https://lemmy.world/inbox"
      +apDomain: "lemmy.world"
      +apPreferredUsername: "selfhosted"
      +apDiscoverable: true
      +apManuallyApprovesFollowers: null
      +privateKey: null
      +publicKey: null
      +apFetchedAt: DateTime @1703473826 {#3010
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +apDeletedAt: null
      +apTimeoutAt: null
      +visibility: "visible             "
      +createdAt: DateTimeImmutable @1703473826 {#3011
        date: 2023-12-25 04:10:26.0 +01:00
      }
      +__isInitialized__: true
       …2
    }
    +image: null
    +domain: Proxies\__CG__\App\Entity\Domain {#2013 …}
    +slug: "Feedback-on-Design-and-Firewall-Options"
    +title: "Feedback on Design and Firewall Options"
    +url: null
    +body: """
      All the cool projects I see while lurking around here have thrown me into the world of Self-Hosting! Some months ago I got myself a NAS, flashed it with TrueNAS and started playing. Today, I am ready to face the creation of my first homelab.\n
      \n
      Since I got the basic data storage working, I decided to continue with the Firewall setup. I’d like to have my security figured out before I start spinning up machines, playing with their configs and unwittingly opening all kind of arcane doors to the unknown. So I turn to the Fediverse!\n
      \n
      I’d like to create the standard network with a DMZ. Within the network, I plan to use VLANS to manage traffic between devices, and the firewall to limit internet access.\n
      \n
      This is a sketch of what I think I want to achieve:\n
      \n
      ![](https://lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)\n
      \n
      ### Connections\n
      \n
      - The Consoles will connect only to the internet\n
      - The Home Devices (printers) will connect only to the Home WKS\n
      - There will be a NAS device hosting VMs with services accessible only from the home network: \n
          - The Home Automation will connect to IoT\n
          - The Recipes will connect to Home Wks\n
          - The Data Archive will connect to Home Wks\n
          - Jellybean will connect to: \n
              - Home Wks\n
              - TV\n
          - *arr Stack will connect to: \n
              - The Internet\n
              - the NAS (presumably Jellybean)\n
      - The Home WKS connect to pretty much anything\n
      \n
      ### Available Hardware\n
      \n
      - OpenWRT compatible Router\n
      - 2.5gbs Unmaged Switch\n
      - 1gbs Unmaged Switch\n
      - QNAS with 2x2.5gbs NIC, running TrueNas\n
      - A few Rpis of different specs\n
      \n
      Questions\n
      =========\n
      \n
      #### Firewall\n
      \n
      My Main questions relate to the Firewall. It seems that pfsense is the way to go for a SW Firewall:\n
      \n
      - What HW should i use? would a Raspberry pi 4, 4GB RAM work?\n
      - What do you think of Netgear 1100?\n
      - I like this device since 3ports would allow me to create a physically separate DMZ\n
      - Should I consider other firewalls?\n
      \n
      #### NAS\n
      \n
      For Bonus Points, some questions regarding the NAS:\n
      \n
      - With my current diagram, it seems like it is not possible for the NAS to receive updates from the internet. The obvious change is to place the NAS within the DMZ, but I’d like to keep the Data Archive as far from the net as possible\n
      - Should i locate the entire NAS in the DMZ?\n
      - My TrueNas has 2x2.5Gb ports. Can i connect each NIC to a different network? Would this have any benefit?\n
      \n
      Thanks for your time!
      """
    +type: "article"
    +lang: "en"
    +isOc: false
    +hasEmbed: false
    +commentCount: 7
    +favouriteCount: 22
    +score: 0
    +isAdult: false
    +sticky: false
    +lastActive: DateTime @1728288680 {#2133
      date: 2024-10-07 10:11:20.0 +02:00
    }
    +ip: null
    +adaAmount: 0
    +tags: null
    +mentions: null
    +comments: Doctrine\ORM\PersistentCollection {#2040 …}
    +votes: Doctrine\ORM\PersistentCollection {#2349 …}
    +reports: Doctrine\ORM\PersistentCollection {#2141 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2164 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2314 …}
    +badges: Doctrine\ORM\PersistentCollection {#2328 …}
    +children: [
      App\Entity\EntryComment {#1692
        +user: App\Entity\User {#265
          +avatar: null
          +cover: null
          +email: "farcaller@fstab.sh"
          +username: "@farcaller@fstab.sh"
          +roles: []
          +followersCount: 0
          +homepage: "front"
          +about: "**beep ** bop."
          +lastActive: DateTime @1728288680 {#273
            date: 2024-10-07 10:11:20.0 +02:00
          }
          +markedForDeletionAt: null
          +fields: null
          +oauthGithubId: null
          +oauthGoogleId: null
          +oauthFacebookId: null
          +oauthKeycloakId: null
          +hideAdult: true
          +showSubscribedUsers: true
          +showSubscribedMagazines: true
          +showSubscribedDomains: true
          +preferredLanguages: []
          +featuredMagazines: null
          +showProfileSubscriptions: false
          +showProfileFollowings: true
          +markNewComments: false
          +notifyOnNewEntry: false
          +notifyOnNewEntryReply: true
          +notifyOnNewEntryCommentReply: true
          +notifyOnNewPost: false
          +notifyOnNewPostReply: true
          +notifyOnNewPostCommentReply: true
          +addMentionsEntries: false
          +addMentionsPosts: true
          +isBanned: false
          +isVerified: false
          +isDeleted: false
          +isBot: false
          +spamProtection: true
          +customCss: null
          +ignoreMagazinesCustomCss: false
          +moderatorTokens: Doctrine\ORM\PersistentCollection {#253 …}
          +magazineOwnershipRequests: Doctrine\ORM\PersistentCollection {#249 …}
          +moderatorRequests: Doctrine\ORM\PersistentCollection {#238 …}
          +entries: Doctrine\ORM\PersistentCollection {#196 …}
          +entryVotes: Doctrine\ORM\PersistentCollection {#168 …}
          +entryComments: Doctrine\ORM\PersistentCollection {#141 …}
          +entryCommentVotes: Doctrine\ORM\PersistentCollection {#111 …}
          +posts: Doctrine\ORM\PersistentCollection {#84 …}
          +postVotes: Doctrine\ORM\PersistentCollection {#99 …}
          +postComments: Doctrine\ORM\PersistentCollection {#1863 …}
          +postCommentVotes: Doctrine\ORM\PersistentCollection {#1479 …}
          +subscriptions: Doctrine\ORM\PersistentCollection {#1658 …}
          +subscribedDomains: Doctrine\ORM\PersistentCollection {#1868 …}
          +follows: Doctrine\ORM\PersistentCollection {#1917 …}
          +followers: Doctrine\ORM\PersistentCollection {#1601 …}
          +blocks: Doctrine\ORM\PersistentCollection {#1805 …}
          +blockers: Doctrine\ORM\PersistentCollection {#1810 …}
          +blockedMagazines: Doctrine\ORM\PersistentCollection {#1857 …}
          +blockedDomains: Doctrine\ORM\PersistentCollection {#1860 …}
          +reports: Doctrine\ORM\PersistentCollection {#1791 …}
          +favourites: Doctrine\ORM\PersistentCollection {#2416 …}
          +violations: Doctrine\ORM\PersistentCollection {#1824 …}
          +notifications: Doctrine\ORM\PersistentCollection {#1914 …}
          +awards: Doctrine\ORM\PersistentCollection {#1929 …}
          +subscribedCategories: Doctrine\ORM\PersistentCollection {#1867 …}
          +categories: Doctrine\ORM\PersistentCollection {#1880 …}
          -id: 74862
          -password: "$2y$13$rWsJcMyA8J4LcXZtiU4zruNmsWAsmzSfqHZgkrrx/hgl43Co3oiu6"
          -totpSecret: null
          -totpBackupCodes: []
          -oAuth2UserConsents: Doctrine\ORM\PersistentCollection {#1894 …}
          +apId: "farcaller@fstab.sh"
          +apProfileId: "https://fstab.sh/u/farcaller"
          +apPublicUrl: "https://fstab.sh/u/farcaller"
          +apFollowersUrl: null
          +apInboxUrl: "https://fstab.sh/inbox"
          +apDomain: "fstab.sh"
          +apPreferredUsername: "farcaller"
          +apDiscoverable: true
          +apManuallyApprovesFollowers: false
          +privateKey: null
          +publicKey: null
          +apFetchedAt: DateTime @1700269471 {#274
            date: 2023-11-18 02:04:31.0 +01:00
          }
          +apDeletedAt: null
          +apTimeoutAt: null
          +visibility: "visible             "
          +createdAt: DateTimeImmutable @1699857340 {#268
            date: 2023-11-13 07:35:40.0 +01:00
          }
        }
        +entry: Proxies\__CG__\App\Entity\Entry {#1691 …2}
        +magazine: Proxies\__CG__\App\Entity\Magazine {#1573 …2}
        +image: null
        +parent: Proxies\__CG__\App\Entity\EntryComment {#1686 …}
        +root: Proxies\__CG__\App\Entity\EntryComment {#1689 …}
        +body: """
          I’ll make a note here that a firewall is useful for internal traffic, too. Those IoT devices can get pretty annoying, so you’d want to e.g. drop your cheap webcams into a VLAN and disallow them from talking to enjoying but their cloud, and especially the other VLANs, or isolate Alexa capable device so it won’t try to figure what else you got there in your house over mDNS (it will).\n
          \n
          A managed switch would do nicely. Having isolated ports on the switch (and the wifi AP) is also great if you want to make sure the specific device will only talk to the gateway and not its peers.
          """
        +lang: "en"
        +isAdult: false
        +favouriteCount: 0
        +score: 0
        +lastActive: DateTime @1706098966 {#1705
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +ip: null
        +tags: null
        +mentions: [
          "@OpenTheSeaLegs@lemmyf.uk"
          "@atzanteol@sh.itjust.works"
        ]
        +children: Doctrine\ORM\PersistentCollection {#1680 …}
        +nested: Doctrine\ORM\PersistentCollection {#1683 …}
        +votes: Doctrine\ORM\PersistentCollection {#1702 …}
        +reports: Doctrine\ORM\PersistentCollection {#1596 …}
        +favourites: Doctrine\ORM\PersistentCollection {#1613 …}
        +notifications: Doctrine\ORM\PersistentCollection {#1621 …}
        -id: 336487
        -bodyTs: "'alexa':53 'also':92 'annoy':22 'ap':90 'capabl':54 'cheap':31 'cloud':45 'd':25 'devic':18,55,102 'disallow':37 'drop':29 'e.g':28 'els':64 'enjoy':42 'especi':47 'figur':62 'firewal':9 'gateway':108 'get':20 'got':66 'great':93 'hous':70 'intern':13 'iot':17 'isol':52,82 'll':2 'make':3,98 'manag':76 'mdns':72 'nice':80 'note':5 'peer':112 'port':83 'pretti':21 'specif':101 'sure':99 'switch':77,86 'talk':40,105 'traffic':14 'tri':60 'use':11 'vlan':35,50 'want':26,96 'webcam':32 'wifi':89 'won':58 'would':78"
        +ranking: 0
        +commentCount: 0
        +upVotes: 0
        +downVotes: 0
        +visibility: "visible             "
        +apId: "https://fstab.sh/comment/1504370"
        +editedAt: null
        +createdAt: DateTimeImmutable @1706098966 {#1795
          date: 2024-01-24 13:22:46.0 +01:00
        }
        +"title": 336487
      }
    ]
    -id: 32551
    -titleTs: "'design':3 'feedback':1 'firewal':5 'option':6"
    -bodyTs: "'/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':145 '1100':295 '1gbs':239 '2.5':235 '2x2.5gb':384 '2x2.5gbs':244 '3ports':301 '4':285 '4gb':286 'access':130,176 'achiev':142 'ago':23 'allow':303 'anyth':229 'arcan':89 'archiv':198,364 'around':9 'arr':211 'autom':184 'avail':230 'basic':52 'benefit':399 'bonus':318 'chang':347 'compat':233 'config':82 'connect':146,150,160,186,192,200,206,214,225,388 'consid':313 'consol':148 'continu':59 'cool':3 'creat':104,306 'creation':43 'current':327 'd':65,101,358 'data':53,197,363 'decid':57 'devic':123,157,171,299 'diagram':328 'differ':252,393 'dmz':110,310,355,380 'door':90 'entir':376 'face':41 'far':366 'fedivers':99 'figur':71 'firewal':62,126,255,262,275,315 'first':46 'flash':29 'gbs':236 'go':271 'got':25,50 'hardwar':231 'home':156,164,180,183,194,202,208,223 'homelab':47 'host':20,172 'hw':277 'internet':129,154,217,344 'iot':188 'jellybean':204,221 'keep':361 'kind':87 'lemmyf.uk':144 'lemmyf.uk/pictrs/image/74aeb2e6-4e83-4e1a-a2ea-ed075759fd5e.png)':143 'like':66,102,297,331,359 'limit':128 'locat':374 'lurk':8 'machin':78 'main':257 'manag':120 'month':22 'much':228 'nas':28,170,219,316,324,338,352,377 'net':369 'netgear':294 'network':107,113,181,394 'nic':245,390 'obvious':346 'open':85 'openwrt':232 'pfsens':266 'physic':308 'pi':284 'place':350 'plan':115 'play':35,79 'point':319 'port':385 'possibl':335,371 'presum':220 'pretti':227 'printer':158 'project':4 'qnas':242 'question':254,258,321 'ram':287 'raspberri':283 'readi':39 'receiv':340 'recip':190 'regard':322 'relat':259 'router':234 'rpis':250 'run':246 'secur':70 'see':6 'seem':264,330 'self':19 'self-host':18 'separ':309 'servic':175 'setup':63 'sinc':48,300 'sketch':134 'spec':253 'spin':76 'stack':212 'standard':106 'start':34,75 'storag':54 'sw':274 'switch':238,241 'thank':400 'think':138,292 'thrown':12 'time':403 'today':36 'traffic':121 'truena':32,247,382 'turn':96 'tv':210 'unknown':93 'unmag':237,240 'unwit':84 'updat':341 'use':117,280 'vlan':118 'vms':173 'want':140 'way':269 'within':111,353 'wks':165,195,203,209,224 'work':55,288 'world':16 'would':281,302,395"
    +cross: false
    +upVotes: 0
    +downVotes: 0
    +ranking: 1706084419
    +visibility: "visible             "
    +apId: "https://lemmyf.uk/post/4971341"
    +editedAt: null
    +createdAt: DateTimeImmutable @1705999419 {#1737
      date: 2024-01-23 09:43:39.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
]