[Project - Homelab]
My lab contains Proxmox VE v8, which is configured with three virtual switches (vSwitches): DMZ, WAN, and LAN. This setup allows for a segmented and secure network environment for testing and development.
In the **DMZ (Demilitarized Zone)**, I have deployed several virtual machines:
- **Caddy Load Balancer:** This VM has `cloudflared` installed and acts as a robust load balancer, distributing traffic to internal services.
- **Wazuh:** A free and open-source security platform that provides SIEM, EDR, vulnerability management, and compliance capabilities.
- **Apache Guacamole Remote Desktop:** Enables secure, clientless access to my lab's virtual machines via a web browser.
- **Kali Linux:** A powerful penetration testing distribution, used for security assessments and ethical hacking exercises within the isolated lab environment.
The `cloudflared` instance in the DMZ is specifically configured to utilize **CloudFlare Zero Trust Network Access (ZTNA)**. This allows me to securely access my internal lab tools and services from any location without the need for a traditional VPN, significantly enhancing the perimeter security and access control.
This project demonstrates my practical skills in virtualization, cloud security integration, network design, and the deployment of security measures to protect digital assets. It's a continuous learning environment where I explore new technologies and refine my security engineering capabilities.