possiblylinux127

IP resolution requires ARP/NDP which are layer 2

To play devil’s advocate, technically don’t need a router for network. Your Proxmox hosts should be in the same layer 2 which means they can communicate regardless of the state of the default gateway.

OpenWRT has a zone based Firewall just like OPNsense does. Sure it isn’t as clean but I don’t really see a usecase for OPNsense that OpenWRT couldn’t fulfill

Do you need VXlan? Unless you are doing something really funky, regular vlans should work fine. All you need is a router somewhere on your network to terminate the connection. In a homelab this would typically be a firewall as well as most people don’t need more than one router.

I personally would not recommend this setup as any issue with your proxmox cluster will turn into a network issue.

Instead, I would purchase a cheapish router that can run OpenWRT. If you are dead set on OPNsense you can find x86 boards from various vendors or you can make a dedicated router out of a network card and a small form factor computer

That hasn’t been my experience

Most small form factor machines will idle in less than 10 watts

Depending on what you are doing that may not be a good idea. The N100 is way overpriced and the Atom is very old and thus has limited I/O speeds and awful performance.

I would get a Intel 6-8 gen i5 and then if you can afford it I would get some SSDs for data storage.

Keep in mind hardware prices are astronomic right now so you are unlikely to get a good deal

Honesty you could just write stuff down and put it somewhere safe. Don’t overcomplicate what could be a simple solution.

I wouldn’t recommend it personally

There are many different clients available

What is the use case?

Is there a reason it needs to be public facing?

You could build a weather app using flask and bootstrap 5. (Flask is the backend and bootstrap is the frontend)

Is there are reason you can’t just use the Homar weather plugin?

Image

What dashboard are you using?

There are many different ways to do this

What is the usecase?

You can get refurbished HHDs for much cheaper

As long as they have a 2 year warranty you are goid

Just because you can do it doesn’t mean it is feasible

It comes with a lot of downsides

It avoids all the issues with static IPs though

Manually setting static IPs leads to a incredibly confusing network setup and you are liable to end up with duplicate IPs

Separating LANs doesn’t really do much in terms of the wider internet. An adversary would likely be more interested in your internet connection than anything else.

I personally would stick to using a VPN

Don’t do this

Right now you know enough to be dangerous and because of that you should not expose thing to the internet.

You very much want dhcp

Inside your DHCP server you should set a static IP assignment.

What’s your budget?

Are you exposing things to the internet?

Why crowdsec?

By the time you ask AI you could just read the docs

I would strongly recommend against using AI

All of the large scale projects are developed by enterprises