Network Services: Router, VPN, DNS and NAS

10 Lektionen in dieser Stufe

1. Routing, NAT and Forwarding on Linux
   Read routing tables and make a Pi pass traffic between two networks. · Lab: Enable forwarding and route a laptop through the Pi using two interfaces.
2. Firewalls with nftables
   Write a default-deny rule set with stateful rules and logging. · Lab: Build a rule set that allows SSH and DNS in, masquerades out and logs drops.
3. Turning a Pi into a Wi-Fi Access Point
   Create a hotspot with NetworkManager and choose channel and security. · Lab: Create a WPA2 access point that shares the Ethernet uplink.
4. DHCP and Local DNS with dnsmasq
   Hand out addresses and local names on your own subnet. · Lab: Serve a DHCP range with two reservations and resolve local hostnames.
5. Network-Wide DNS Filtering
   Block unwanted domains for every client with a filtering resolver. · Lab: Deploy a DNS filter in a container, point DHCP at it and review the query log.
6. A WireGuard VPN Server and Clients
   Create keys, peers and allowed-address rules for remote access. · Lab: Set up a WireGuard interface and connect a phone from mobile data.
7. Reaching a Pi Behind Carrier-Grade NAT
   Use dynamic DNS, relays or reverse tunnels when no port can be forwarded. · Lab: Reach the Pi through an outbound tunnel to a small relay host.
8. A Samba File Server for Mixed Networks
   Share folders to Windows, macOS and Linux with per-user access. · Lab: Create a private and a shared folder and mount both from another computer.
9. Redundant Storage: mdadm RAID on a SATA HAT
   Mirror two drives and rehearse a drive failure. · Lab: Build a RAID 1 array, fail one drive on purpose and rebuild it.
10. VLANs and Segmenting IoT Devices
    Separate trusted and untrusted devices on one cable. · Lab: Create tagged interfaces for home and IoT networks and firewall between them.

Abschlussprojekt

A travel router and home server that shares an uplink through a firewall, filters DNS for every client, accepts WireGuard connections and serves a mirrored network share.

Teile für diese Stufe

• 1 × Raspberry Pi 5 or Pi 4 set from Level 1
• 1 × USB 3.0 Gigabit Ethernet adapter
• 3 × Ethernet patch cable
• 1 × Managed Gigabit switch 5-port with VLAN support
• 1 × SATA HAT or PCIe SATA adapter for Raspberry Pi 5
• 2 × SATA SSD or hard drive
• 1 × 12 V power supply for drives (as required by the SATA HAT)

In jeder Lektion legst du die passenden Teile direkt in den Warenkorb. Raspberry Pi →