Network Topology

Compiled from previous BarnesBears troubleshooting and configuration sessions, October 2026. Treat this as a working inventory, not an automatically discovered live configuration.

Logical layout

                         Internet
                            |
                     Firewall / UniFi
                            |
                    Home LAN 192.168.10.0/24
                       |       |       |
                 Proxmox    Synology   Traefik
                 5 nodes    .10.25     .10.110
                       |
                 VMs and LXCs
                       |
                 AD / DNS / apps

      Dedicated Ceph network: 192.168.14.0/24
      prox-1 ... prox-5: 192.168.14.41 ... .45

This diagram shows known logical relationships, not verified switch ports, VLAN tags, firewall zones, or physical wiring.

Known networks

Network	Purpose	Notes
`192.168.10.0/24`	Home LAN, host/VM/LXC services	Proxmox `vmbr0` used for VM/LXC connectivity
`192.168.14.0/24`	Ceph cluster traffic	Dedicated network interface/subnet for Ceph

No verified VLAN IDs, gateway addresses, DHCP pool boundaries, or switch topology are recorded here.

Known infrastructure addresses

Host or service	Address	Role
`prox-1`	`192.168.10.41`	Proxmox node
`prox-2`	`192.168.10.42`	Proxmox node
`prox-3`	`192.168.10.43`	Proxmox node
`prox-4`	`192.168.10.44`	Proxmox node
`prox-5`	`192.168.10.45`	Proxmox node
Synology NAS	`192.168.10.25`	Shared storage / NFS
`ad-1`	`192.168.10.28`	Samba AD DC and DNS
`ad-2`	`192.168.10.29`	Samba AD DC and DNS
AdGuard	`192.168.10.82`	DNS filtering
Zabbix	`192.168.10.87`	Monitoring server
`docs`	`192.168.10.95`	MkDocs/Nginx documentation LXC
`traefik-1`	`192.168.10.110`	Reverse proxy

Addresses are from earlier working sessions. Check current DHCP leases, DNS, and IPAM/NetBox before using as authoritative.

Ceph node interfaces

Node	Ceph IP
`prox-1`	`192.168.14.41`
`prox-2`	`192.168.14.42`
`prox-3`	`192.168.14.43`
`prox-4`	`192.168.14.44`
`prox-5`	`192.168.14.45`

DNS and reverse proxy

Samba AD provides domain DNS for barnesbears.xyz. UniFi supplies DHCP and has been used for reverse lookups of devices that lack dedicated DNS records. Service hostnames generally point to Traefik rather than directly to application servers.

See DNS and Directory Services and Traefik.

Storage traffic

The Synology NAS (192.168.10.25) is AD-joined and was configured with a 2 Gbps LACP bond. NFS mounts support services including Nextcloud and music storage. LACP improves aggregate throughput across multiple flows but does not make a single TCP flow 2 Gbps.

Verification commands

ip -br addr
ip route
resolvectl status
getent hosts ad-1.barnesbears.xyz ad-2.barnesbears.xyz

On a Proxmox node:

pvecm status
ceph -s
ip -br addr

Outstanding inventory work

Confirm gateway and DHCP scopes, switch and port mapping, VLANs, firewall rules, LACP members, UniFi model/controller, NetBox inventory, and the precise LAN-only access policy for administrative sites.