Network Infrastructure
Routing, VPN, DNS and network services connecting different environments.
Overview
Networking is one of the central parts of my infrastructure.
The environment includes MikroTik routers, managed switches, VPN endpoints and several internal services.
Routing
The network is segmented around different roles and environments.
MikroTik handles the routing layer while Linux systems provide additional services.
VPN
Remote access is designed around encrypted tunnels rather than exposing internal services directly to the internet.
The architecture has evolved several times as requirements changed.
DNS
Internal DNS provides stable names for infrastructure services and avoids relying on hardcoded addresses.
Philosophy
I prefer boring networking.
Predictable routing, explicit firewall rules and infrastructure that can be understood from the configuration are more valuable than unnecessary complexity.