Lab Hardware & Architecture Specifications
A complete technical colophon of the bare-metal servers, SAN storage fabrics, virtualization clusters, and enterprise network topology powering ITTechSTL.
1. Physical Compute & Hypervisors
| Host Name | Platform / Role | Hardware & Specs | Primary IP | Key Workloads |
|---|---|---|---|---|
XCPNG-R710-01 |
XCP-ng 8.x (Type-1) | Dell PowerEdge R710 · Dual Intel Xeon · 48GB ECC RAM | 10.1.20.9 |
docker02, zabbix01, wazuh01, orch01, XOA |
HV-HYPERV-02 |
Windows Server Hyper-V | Dell PowerEdge Host · 32GB RAM · 4TB iSCSI LUN | 10.1.20.10 |
AD1 (DC/DNS), HA, dockervm, Akaunting, iVentoy |
DEATHSTAR |
Engineering Workstation | Custom Rig · Dedicated AI GPU · NVMe Storage | 10.1.10.x |
Local AI inference, automation runtime, pycdlib, Git |
2. Dedicated SAN Storage Fabric
Dell EqualLogic Array
- Array Group:
STOREGRP1(10.1.99.100) - Storage Interfaces: Dual 1GbE (
10.1.99.25&10.1.99.26) - Out-of-Band Mgmt: Dedicated port (
10.1.1.24) - Fabric Isolation: Zero internet routing; strictly VLANs 98 & 99
MPIO & Storage Repositories
- XCP-ng SR:
SAN-XCPNG-VOL01(800GB lvmoiscsi) - XCP-ng Multipath: Active dual path via
eth2ð3 - Hyper-V LUN:
iscsilun01(4TB NTFS on Drive H:) - DSM Policy: Dell EqualLogic DSM with Least Queue Depth (LQD)
3. Network Architecture & VLAN Matrix
The network backbone is routed and secured by a UniFi Dream Machine Pro (UDM Pro) interconnected via 10GbE SFP+ DAC to a central SW-CORE-01 switch and SW-OFC-01 edge distribution switch.
| VLAN ID | Network Name | Subnet CIDR | Purpose & Security Controls |
|---|---|---|---|
1 |
NET-MGMT-VLAN1 |
10.1.1.0/24 |
Switch mgmt, iDRACs, out-of-band interfaces (Untagged native) |
10 |
NET-WORKSTATIONS-VLAN10 |
10.1.10.0/24 |
Admin workstations, laptops, PXE boot (DHCP Options 66/67) |
20 |
NET-SERVERS-VLAN20 |
10.1.20.0/24 |
Production VMs, Docker stacks, Domain Controller, SIEM |
30 |
NET-UNUSED-VLAN30 |
10.1.30.0/24 |
Quarantined spare switch ports on core rack |
40 |
NET-IOT-VLAN40 |
10.1.40.0/24 |
Smart-home sensors, Google Home speakers, isolated appliances |
60 |
NET-VOIP-VLAN60 |
10.1.60.0/24 |
FreePBX telephony, SIP softphones, Yealink hardware desk phones |
70 |
NET-GUEST-VLAN70 |
10.1.70.0/24 |
Client isolation, strict bandwidth quotas, no LAN access |
98 |
NET-ISCSI-B-VLAN98 |
10.1.98.0/24 |
Dedicated SAN Storage Channel B (No gateway routing) |
99 |
NET-ISCSI-A-VLAN99 |
10.1.99.0/24 |
Dedicated SAN Storage Channel A (No gateway routing) |
-- |
NET-VPN-WIREGUARD |
10.1.100.0/24 |
Encrypted remote engineering tunnels directly to core |
4. Observability, SIEM & Security Baseline
Zabbix 7.0 LTS Monitoring
Monitors every VM, switch interface, and storage controller. Features a custom Python dependency graph so downstream service alerts are suppressed during host or gateway maintenance.
Wazuh 4.14 SIEM Cluster
Dedicated VM (wazuh01) ingesting endpoint telemetry across Linux and Windows nodes with live vulnerability scanning, audit logging, and automated threat detection.
Zero Plaintext Secrets
All administrative credentials, SSH keys, and API tokens are brokered via the central Vaultwarden instance (vault.ittechstl.local) and Bitwarden CLI automation.
Infrastructure specifications are updated continuously as hardware migrations occur. Last verified on host docker02. Return to Projects or browse the Engineering Blog.