William PoolIndustrial automation & IT/OT convergence
ENFR
All projects

05Infrastructure lab

Virtualised infrastructure & network security

A Proxmox VE environment hosting monitoring tools and isolated test labs — segmented, firewalled and reachable only through encrypted tunnels.

  • PlatformProxmox VE
  • IsolationVLAN · SDN · firewall
  • AccessVPN · bastion
RoleArchitecture, network segmentation, access control and automation
ContextInfrastructure lab
Stack
  • Proxmox VE
  • SDN
  • VLAN
  • Firewall
  • WireGuard
  • Teleport
  • Bash
  1. 01Remote userguest or admin
  2. 02VPN tunnelWireGuard overlay
  3. 03Bastionidentity & access
  4. 04Proxmox SDNVLANs · firewall
  5. 05VMsmonitoring · test labs
Fig. 05.1 — Access path

Platform

A Proxmox VE environment hosts the monitoring stack and isolated test environments, so experiments never touch production services.

Segmentation

  • VLAN segmentation and Proxmox SDN zones.
  • Firewall rules and strict inter-VM access policies.

Remote access

Encrypted access through VPN tunnels. An outside collaborator can be given access without ever seeing the internal network or the admin tools: a bastion handles identity and access for SSH and web apps, while a separate WireGuard overlay carries the traffic. Access control and network flows are two independent layers — either one blocks on its own.

Automation

Provisioning is scripted in Bash, so environments can be rebuilt the same way every time.