2024-11-03 00:19:58 +00:00
|
|
|
# Cluster Architecture
|
|
|
|
|
|
2024-11-03 18:15:26 +00:00
|
|
|
The cluster consists of a [`k3s`](https://k3s.io) cluster, a dedicated bastion host
|
2024-11-03 00:19:58 +00:00
|
|
|
running an nginx reverse proxy, and a dedicated NAS.
|
|
|
|
|
|
|
|
|
|
```mermaid
|
|
|
|
|
architecture-beta
|
|
|
|
|
service internet(internet)[Internet]
|
|
|
|
|
|
|
|
|
|
group home(server)[Home]
|
|
|
|
|
|
|
|
|
|
service bastion(server)[Bastion] in home
|
2024-11-03 18:15:26 +00:00
|
|
|
service router(server)[OpenWRT] in home
|
2024-11-03 00:19:58 +00:00
|
|
|
service nas(disk)[Gluttony NAS] in home
|
|
|
|
|
|
|
|
|
|
group cluster(server)[K3S Cluster] in home
|
|
|
|
|
|
|
|
|
|
service gluttony(server)[Gluttony] in cluster
|
|
|
|
|
service gluttonygpu(server)[Gluttony GPU] in cluster
|
|
|
|
|
service gluttonym3(server)[Gluttony M3] in cluster
|
|
|
|
|
|
|
|
|
|
service metallb(cloud)[MetalLB] in cluster
|
|
|
|
|
service storage(cloud)[K3S Storage] in cluster
|
|
|
|
|
|
2024-11-03 18:15:26 +00:00
|
|
|
group vps(cloud)[VPS]
|
2024-11-03 00:19:58 +00:00
|
|
|
|
2024-11-03 18:15:26 +00:00
|
|
|
service sloth(server)[Sloth] in vps
|
|
|
|
|
service greed(server)[Greed] in vps
|
|
|
|
|
service alb(cloud)[ALB] in vps
|
|
|
|
|
|
|
|
|
|
internet:L -- R:router
|
|
|
|
|
router:L -- R:bastion
|
|
|
|
|
bastion:T -- B:metallb
|
2024-11-03 00:19:58 +00:00
|
|
|
|
|
|
|
|
metallb:T -- B:gluttony
|
|
|
|
|
metallb:T -- B:gluttonygpu
|
|
|
|
|
metallb:T -- B:gluttonym3
|
|
|
|
|
|
|
|
|
|
storage:B -- T:nas
|
|
|
|
|
|
2024-11-03 18:15:26 +00:00
|
|
|
|
|
|
|
|
internet:T -- B:alb
|
|
|
|
|
alb:R -- L:sloth
|
|
|
|
|
alb:R -- L:greed
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2024-11-03 00:19:58 +00:00
|
|
|
|
|
|
|
|
```
|
2024-11-03 18:15:26 +00:00
|
|
|
|
|
|
|
|
An interesting thing to note is that all server equipment (all hosts listed above)
|
|
|
|
|
reside in a deticated VLAN to isolate them from other hosts on the network.
|
|
|
|
|
|
|
|
|
|
Although not exactly like an enterprise network, within my subnetting I have accounted
|
|
|
|
|
for multiple physical locations, each with networks of servers, mobile clients, and
|
|
|
|
|
normal clients.
|
