vault: add 家庭网络基础设施 area note with full topology, devices, services
This commit is contained in:
Yaojia Wang
224
3 - Areas/家庭网络基础设施.md
Normal file
224
3 - Areas/家庭网络基础设施.md
Normal file
@@ -0,0 +1,224 @@
|
||||
---
|
||||
created: "2026-03-15"
|
||||
type: moc
|
||||
tags: [homelab, networking, infrastructure]
|
||||
---
|
||||
|
||||
# 家庭网络基础设施
|
||||
|
||||
## 网络拓扑
|
||||
|
||||
```
|
||||
互联网 (Telia, 瑞典)
|
||||
│
|
||||
▼
|
||||
光猫 (拨号, Dynamic IP)
|
||||
│
|
||||
▼ WAN (eth0, 公网 IP: 81.231.178.251)
|
||||
iStoreOS / EasePi Pro (192.168.68.63) ← 主网关
|
||||
├── DHCP 服务器
|
||||
├── dnsmasq (:53) → 内网 DNS
|
||||
├── OpenClash / mihomo (:7874) → 翻墙回国 + 广告拦截
|
||||
├── WireGuard VPN (10.8.0.0/24)
|
||||
├── 端口映射
|
||||
│
|
||||
▼ LAN (eth1/eth2/eth3, 192.168.68.0/22)
|
||||
│
|
||||
├── Deco BE65 (AP 模式) ─── WiFi ─── 手机/平板/笔记本
|
||||
│ └── Deco 子节点 (mesh)
|
||||
│
|
||||
└── 交换机 (2楼)
|
||||
├── PVE 服务器 (192.168.68.69) ─── 虚拟机集群
|
||||
└── QNAP NAS (192.168.68.70) ─── 存储 + Docker 服务
|
||||
```
|
||||
|
||||
## 物理布局
|
||||
|
||||
| 楼层 | 设备 | 连接方式 |
|
||||
|------|------|---------|
|
||||
| 1楼 | 光猫 → iStoreOS → Deco BE65 主机 | 有线 |
|
||||
| 2楼 | 交换机 → PVE + NAS | 有线（通过 Deco mesh 回程到 iStoreOS） |
|
||||
|
||||
---
|
||||
|
||||
## 核心设备
|
||||
|
||||
### iStoreOS / EasePi Pro — 主网关
|
||||
|
||||
| 项目 | 值 |
|
||||
|------|-----|
|
||||
| IP | `192.168.68.63` |
|
||||
| 系统 | iStoreOS 24.10.2 (aarch64) |
|
||||
| 角色 | 主网关、DHCP、DNS、VPN、代理 |
|
||||
| SSH | `ssh root@192.168.68.63`（需 1Password agent） |
|
||||
| 管理面板 | http://192.168.68.63 |
|
||||
|
||||
**运行服务：**
|
||||
|
||||
| 服务 | 端口 | 说明 |
|
||||
|------|------|------|
|
||||
| dnsmasq | :53 | 内网 DNS + 转发到 OpenClash |
|
||||
| OpenClash | :7874 | fake-ip 分流 + 翻墙回国 |
|
||||
| OpenClash Dashboard | :9090 | 连接监控 |
|
||||
| WireGuard VPN | tun0 (10.8.0.0/24) | 远程接入 |
|
||||
|
||||
### Deco BE65 — WiFi 网状网络
|
||||
|
||||
| 项目 | 值 |
|
||||
|------|-----|
|
||||
| IP | `192.168.68.182`（DHCP） |
|
||||
| 模式 | AP（接入点） |
|
||||
| 角色 | 仅 WiFi mesh，不做路由/DHCP |
|
||||
| 管理 | Deco App |
|
||||
|
||||
### PVE 服务器 — 虚拟化平台
|
||||
|
||||
| 项目 | 值 |
|
||||
|------|-----|
|
||||
| IP | `192.168.68.69` |
|
||||
| 系统 | Proxmox VE (Linux 6.8.12-9-pve, x86_64) |
|
||||
| SSH | `ssh root@192.168.68.69`（需 1Password agent） |
|
||||
| 管理面板 | https://192.168.68.69:8006 |
|
||||
| 存储 | local (98GB dir) + local-lvm (855GB lvmthin) |
|
||||
|
||||
**虚拟机列表：**
|
||||
|
||||
| VMID | 名称 | IP | 内存 | 磁盘 | 状态 | 说明 |
|
||||
|------|------|-----|------|------|------|------|
|
||||
| 100 | HA | - | 2GB | 32GB | running | Home Assistant 智能家居 |
|
||||
| 101 | k8s-cp1 | - | 2GB | 83GB | running | Kubernetes 控制面节点 |
|
||||
| 102 | Wireguard | 192.168.68.107 | 2GB | 32GB | running | WireGuard VPN 服务 |
|
||||
| 103 | k8s-w1 | - | 2GB | 83GB | running | Kubernetes 工作节点 1 |
|
||||
| 104 | k8s-w2 | - | 2GB | 83GB | running | Kubernetes 工作节点 2 |
|
||||
| 105 | pg-01 | - | 8GB | 23GB | running | PostgreSQL 数据库 |
|
||||
| 106 | network-scanner | 192.168.68.84 | 8GB | 43GB | running | 网络扫描工具 |
|
||||
| 111 | adguard-vm | 192.168.68.112 | 512MB | 8GB | running | AdGuard Home（备用，当前未使用） |
|
||||
| 9000 | ubuntu-cloudinit | - | 8GB | 3.5GB | stopped | 模板 |
|
||||
|
||||
### QNAP NAS — 存储与服务
|
||||
|
||||
| 项目 | 值 |
|
||||
|------|-----|
|
||||
| IP | `192.168.68.70` |
|
||||
| 系统 | QNAP (Linux 5.10.60-qnap, x86_64) |
|
||||
| SSH | `ssh -p 4696 kai@192.168.68.70`（需 1Password agent） |
|
||||
| Docker | Container Station (`/share/CACHEDEV4_DATA/.qpkg/container-station/bin/docker`) |
|
||||
|
||||
**Docker 容器：**
|
||||
|
||||
| 容器 | 镜像 | 端口 | 说明 |
|
||||
|------|------|------|------|
|
||||
| n8n | n8nio/n8n | :5678 | 工作流自动化 |
|
||||
| n8n-postgres | postgres:16-alpine | 内部 | n8n 数据库 |
|
||||
| affine_server | toeverything/affine | :3010 | 协作知识库 |
|
||||
| affine_postgres | pgvector/pgvector:pg16 | 内部 | Affine 数据库 |
|
||||
| affine_redis | redis | 内部 | Affine 缓存 |
|
||||
| gitea | gitea/gitea | :2200(SSH), :10011(Web) | Git 代码托管 |
|
||||
| transmission | linuxserver/transmission | :8091(Web), :51413(BT) | BT 下载 |
|
||||
| flowise | flowiseai/flowise | :6060 | AI 工作流 |
|
||||
| flowise-dong | flowiseai/flowise | :6061 | AI 工作流（副本） |
|
||||
| qdrant | qdrant/qdrant | :6333-6334 | 向量数据库 |
|
||||
| npm | nginx-proxy-manager | :80, :81, :443 | 反向代理 |
|
||||
| ddns-go | jeessy/ddns-go | - | DDNS 动态域名 |
|
||||
|
||||
---
|
||||
|
||||
## 网络配置
|
||||
|
||||
### 子网
|
||||
|
||||
| 网段 | 用途 |
|
||||
|------|------|
|
||||
| `192.168.68.0/22` | 家庭 LAN（所有设备） |
|
||||
| `10.8.0.0/24` | WireGuard VPN |
|
||||
| `172.17.0.0/16` | Docker 内部网络 |
|
||||
|
||||
### 端口映射（WAN → LAN）
|
||||
|
||||
| 外部端口 | 目标 | 说明 |
|
||||
|---------|------|------|
|
||||
| 2200 | 192.168.68.70:2200 | Gitea SSH |
|
||||
| 443 | 192.168.68.70:443 | Nginx Proxy Manager HTTPS |
|
||||
| 51888 | 192.168.68.107:51888 | WireGuard |
|
||||
|
||||
### DNS
|
||||
|
||||
**链路：** `设备 → dnsmasq(:53) → OpenClash(:7874) → 8.8.8.8 / 1.1.1.1`
|
||||
|
||||
**内网 DNS 记录：**
|
||||
|
||||
| 域名 | IP | 说明 |
|
||||
|------|-----|------|
|
||||
| `*.k8s.home` | 192.168.68.70 | Kubernetes 入口 |
|
||||
| `nas.colacoder.com` | 192.168.68.70 | NAS |
|
||||
| `pve.colacoder.com` | 192.168.68.70 | PVE（通过 NPM 代理） |
|
||||
| `npm.colacoder.com` | 192.168.68.70 | Nginx Proxy Manager |
|
||||
| `router.colacoder.com` | 192.168.68.63 | 路由器 |
|
||||
| `adguard.colacoder.com` | 192.168.68.63 | AdGuard Home（旧） |
|
||||
| `claw.colacoder.com` | 192.168.68.70 | Claw 服务 |
|
||||
| `openvas.colacoder.com` | 192.168.68.70 | OpenVAS 漏洞扫描 |
|
||||
| `invest-api.k8s.home` | 192.168.68.240 | 投资 API |
|
||||
|
||||
---
|
||||
|
||||
## DHCP 静态绑定
|
||||
|
||||
| 名称 | IP | MAC | 设备类型 |
|
||||
|------|-----|-----|---------|
|
||||
| YIUKAINAS | 192.168.68.70 | 24:5E:BE:5F:ED:38 | QNAP NAS |
|
||||
| lingke | 192.168.68.69 | 84:47:09:20:70:DA | PVE 服务器 |
|
||||
| easepi | 192.168.68.63 | EE:61:98:11:AD:C4 | iStoreOS 路由器 |
|
||||
| Yiukais-MBP | 192.168.68.87 | 5C:E9:1E:B2:56:79 | MacBook Pro |
|
||||
| Yiukai-Asus-wifi | 192.168.68.79 | 08:3A:88:59:1F:A6 | Asus 笔记本(WiFi) |
|
||||
| Yiukai-Asus-lan | 192.168.68.60 | 44:E5:17:DD:26:01 | Asus 笔记本(有线) |
|
||||
| yiukai-ubuntu | 192.168.68.108 | 1C:79:2D:5C:2C:C4 | Ubuntu 台式机 |
|
||||
| Yiukai | 192.168.68.89 | 10:FF:E0:CC:1D:00 | 个人设备 |
|
||||
| pc | 192.168.68.176 | 12:D0:5B:A3:8B:4F | Windows PC |
|
||||
| pve-docker | 192.168.68.102 | BC:24:11:3B:9C:8A | PVE VM |
|
||||
| wireguard | 192.168.68.107 | BC:24:11:00:4D:D2 | WireGuard VM |
|
||||
| kai-desktop-jetson | 192.168.68.104 | 3C:6D:66:1E:D7:62 | Jetson 开发板 |
|
||||
| homeassistant | 192.168.68.97 | BC:24:11:63:40:1E | Home Assistant VM |
|
||||
| network-scanner | 192.168.68.84 | BC:24:11:09:F1:9E | 网络扫描 VM |
|
||||
| adguard-vm | 192.168.68.112 | BC:24:11:C9:58:CB | AdGuard Home VM |
|
||||
| Yaojia-ipad | 192.168.68.77 | 64:0B:D7:F0:D0:4C | iPad |
|
||||
| Yaojias-iPhone | 192.168.68.73 | 68:EF:DC:B7:36:40 | iPhone |
|
||||
| kuangxideiPhone | 192.168.68.88 | C4:C1:7D:7B:76:CC | iPhone |
|
||||
| android-8fbbfff | 192.168.68.111 | 6C:2D:24:F8:F3:0C | Android 手机 |
|
||||
|
||||
---
|
||||
|
||||
## SSH 访问
|
||||
|
||||
所有 SSH 连接需要通过 1Password SSH Agent：
|
||||
|
||||
```bash
|
||||
# iStoreOS 路由器
|
||||
SSH_AUTH_SOCK="$HOME/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock" ssh root@192.168.68.63
|
||||
|
||||
# PVE 服务器
|
||||
SSH_AUTH_SOCK="$HOME/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock" ssh root@192.168.68.69
|
||||
|
||||
# NAS
|
||||
SSH_AUTH_SOCK="$HOME/Library/Group Containers/2BUA8C4S2C.com.1password/t/agent.sock" ssh -p 4696 kai@192.168.68.70
|
||||
|
||||
# 阿里云 VLESS 服务器
|
||||
ssh admin@8.138.1.192
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## 相关项目
|
||||
|
||||
- [[VLESS-Reality 翻墙回国]] — 翻墙回国代理配置
|
||||
- [[PVE Security Scanner]] — 网络安全扫描
|
||||
|
||||
## 相关资源
|
||||
|
||||
- iStoreOS 管理面板: http://192.168.68.63
|
||||
- PVE 管理面板: https://192.168.68.69:8006
|
||||
- OpenClash Dashboard: http://192.168.68.63:9090
|
||||
- Gitea: http://192.168.68.70:10011
|
||||
- n8n: http://192.168.68.70:5678
|
||||
- Affine: http://192.168.68.70:3010
|
||||
- Nginx Proxy Manager: http://192.168.68.70:81
|
||||
- Transmission: http://192.168.68.70:8091
|
||||
Reference in New Issue
Block a user