Daniel LakelandSaw the message from @guix about a potential security issue this morning. did a #guix pull and deployed to my #guixrouter, problem was fixed within 10 mins of seeing the announcement. So great for an internet facing device. My previous Raspberry Pi 4 device running the Pi OS got updated rarely because of the difficulty of doing it while keeping network online (2 or 3 times in 5 years). This is a substantial security improvement for me.
Olivier Mengué@dolmen
its a mini PC running proxmox, the router is a VM. its left over from being a desktop PC for my kids back in the day so its a celeron 3000 series I think, and has 2 Ethernet ports that I have bonded together. there are 5 bridges in proxmox each attached to a different VLAN on top of the bond. so the router VM sees 5 virtual NICs. WAN, WAN2, LAN, IOT, DMZ
IOT is firewalled away from the WAN, and DMZ is for servers. Wan2 is a fail over to an LTE modem
@guix
@dolmen
The particular PC its on is part of a cluster of 5. 3 are these older devices and 2 are more recent AMD Ryzen 7 5800 series with 32 GB, which I use for NAS and a few other things needing more speed. its a nice way to keep older hardware useful.
the whole cluster is on a UPS which says its drawing 75 watts with the switch and upstream ATT device.
@guix