homelab

6589 readers

1 users here now

founded 5 years ago

MODERATORS

CMonster@lemmy.ml

Best practice for outward facing services (lemmy.world)

submitted 2 years ago by root@lemmy.world to c/homelab@lemmy.ml

6 comments fedilink hide all child comments

I currently have several VLANS (management for network devices, iot for smart devices, infra for security cameras and NAS, one for personal devices, anothe for guests, etc.

Currently I'm hosting a game server which is exposed to the outside world and am thinking of adding a couple more similar services.

Is it best practice to put such machines on their own isolated VLAN to minimize their attack surface?

you are viewing a single comment's thread
view the rest of the comments

[–] poVoq@slrpnk.net 2 points 2 years ago

The reverse is also true. The typical Windows PC is much more prone to being breached than a reasonably well managed Linux server.

permalink
fedilink
source
parent