Context

To continuously improve skills in systems administration, security operations, and penetration testing, I designed and maintained a self-hosted multi-environment lab that mirrors real-world production and security workflows.

Objective

• Safely separate work-related systems from offensive security and research environments
• Practice security testing without risk to production assets
• Simulate real-world network controls, segmentation, and monitoring

🧱 Lab Architecture Overview

The lab environment is logically segmented into multiple isolated zones:

• Work Environment
  • Dedicated systems for professional and production-related tasks
  • Isolated from testing and offensive environments
• Security Practice Environment
  • Web application testing (e.g., vulnerable apps, pentest VMs)
  • PWPA and web exploitation practice labs
• OSINT & Research Environment
  • Dedicated OSINT tools and investigation workflows
  • Controlled outbound access to prevent data leakage
• Monitoring & Defense Environment
  • Security monitoring and log analysis tools
  • Visibility into traffic and system behavior across lab segments

🔐 Network & Security Controls

• pfSense firewall used as the central gateway
• VLAN-based network segmentation between environments
• Controlled inter-VLAN access rules
• NAT and routing policies aligned with real-world enterprise setups
• Separation of offensive and defensive tooling to prevent cross-contamination