HOME NETWORK

This is my home network. It runs the same way I'd run production infrastructure: segmented, documented, and built so someone else could maintain it from the README alone. Nine VLANs enforce zero-trust boundaries between trust zones. Recursive DNS resolution stays local — no third-party DNS provider ever sees a query. Surveillance footage never touches the internet. Every firewall rule is explicit and documented.

It's themed after Rod Serling's The Twilight Zone — because naming your VLANs should be at least a little fun. But underneath the naming convention is a real defense-in-depth architecture: least privilege access, network segmentation as the primary security control, and documentation treated as infrastructure.

NOTE: All IP addresses, subnet ranges, hostnames, and security-sensitive details have been sanitized. This is an architecture showcase, not a penetration test invitation.

The other three projects show that I can build data pipelines. This one shows that I think in systems even when nobody's paying me to. Same patterns, different domain: layered architecture, explicit access control, version-controlled documentation, and a design philosophy that prioritizes the next person who has to maintain it.

It also includes a real ETL pipeline — network telemetry scraped from the infrastructure controller, loaded into PostgreSQL, with automated alerting. The data engineering doesn't stop at work.