Skip to main content

Living Lab Atlas

Infrastructure Lab

This is Mark's self-hosted homelab running entirely on consumer hardware, built and operated on his own personal time to master complex systems in practice. Across four dedicated physical nodes, he has implemented complex multi-VLAN network segmentation (8 segmented VLANs), locked-down firewall controls with zero open inbound ports, centralized SSO with hardware MFA, local AI inference clusters, and a custom 4-season outdoor computer vision security system.

Every metric on this page reflects real-world engineering and deterministic infrastructure cartography backed by a NetBox single source of truth. Retired systems, such as the multimodal VLM intent engine, are documented alongside live production workloads, demonstrating pragmatic engineering judgment and operational discipline.

// Dedicated Homelab Exhibit

OT Context Engine: Local RAG Pipeline & Sanitizer

Mark's Apple M4 Pro node hosts a specialized RAG engine comparing Purdue Model operational technology context pipelines. Explore the live mirrored interface with benchmark analytics, sanitization filters, and build logs.

Explore OT Context Engine →
272 GB
Total RAM
74 TB
Raw Storage
10G SFP+
Optical Core
4
Dedicated Nodes
56
Active Workloads
62
NetBox Devices
373
SSoT IPs

NetBox SSoT snapshot synchronized 2026-10-27 UTC across 8 production network segments.

Node 1 detail

Unraid Primary Storage & Application Host

VLAN 2

Hosts the primary storage array and the bulk of the self-hosted application estate, including the identity provider, the NetBox source of truth, and the reverse proxy tier.

CPU
Intel Core i5-12600K, 10 cores / 16 threads
Memory
128 GB
Array
74 TB raw SAS/SATA
Cache
2 TB NVMe
Operating system
Unraid
Workloads
56 active Docker containers
Storage

74 TB raw SAS/SATA array, 2 TB NVMe cache

Network

10G SFP+ backbone, VLAN 2 (Servers)

Services
PlexNextcloudBookStackAuthentik SSONetBox SSoTNPM reverse proxy
Switching & wireless
Core MikroTik SwOS Switch
Core switching, 10G SFP+ backbone, and hardware ASIC SPAN source

Mirrors the primary uplink at the hardware ASIC level to the Security Onion sensor, so packet capture adds no forwarding load.

MikroTik SwOS Access Switching
Access-layer switching with 802.1Q VLAN tagging

Carries tagged segments from the core to endpoints. Management interfaces live on VLAN 1.

UniFi U6-Enterprise Access Points
Wireless access with per-SSID VLAN mapping

AP management interfaces sit on VLAN 1 (Management & LAN).