Multi-VLAN Home Network
less of a project more of a to-do. Four VLANs on a UniFi UCG Express, each named after one of Gandalf’s names from Tolkien. ProtonVPN WireGuard routes traffic for one segment while firewall rules isolate the rest. Public subdomains go through Cloudflare Zero Trust. some other vpns. encrypted dns. trying to improve my security skills.
| VLAN | Purpose |
|---|---|
| Gandalf | Servers, NAS, services |
| Mithrandir | Client devices via ProtonVPN |
| Tharkûn | IoT devices (isolated) |
| Rivendell | Reserved |
The UCG Express handles VLAN routing and the WireGuard client. The kill switch prevents traffic if the tunnel drops.