Typed project record, editable diagrams, status taxonomy, and evidence placeholders are version controlled.
Lab environment
Enterprise Home Lab
A phased enterprise reference environment for infrastructure, identity, network security, observability, and recovery engineering.
Network topologyEditable SVG
Design artifact — not implementation evidence. Addresses and infrastructure health are intentionally omitted.
Technology inventory
Current virtualization platform hosting the first Windows Server identity workload.
Target virtualization platform for Windows and Linux workloads; deployment evidence pending.
Target routing, VLAN termination, policy enforcement, DHCP relay/service, VPN, and traffic logging role.
Designated administrative plane for hypervisor, firewall, and management interfaces.
Target zone for domain, certificate, logging, monitoring, and application services.
Target zone for managed Windows 11 workstations and user policy testing.
Isolated target zone for Kali Linux, security tooling, and controlled testing.
Restricted target zone for future externally exposed laboratory services.
RF-DC01 hosts the implemented Active Directory Domain Services and internal DNS roles.
Target platform for infrastructure utilities, automation, and selected monitoring services.
Target managed endpoint for domain join, policy, certificate, logging, and security validation.
Target isolated assessment workstation; use limited to authorized lab validation.
First forest and domain controller implemented with initial organizational structure and role-based groups.
Internal DNS is operational on RF-DC01; resilience and recovery validation remain pending.
Controlled address allocation remains a planned core-network capability.
Future internal PKI for certificate enrollment, service identity, and trust testing.
Target SIEM and logging platform for Windows, Linux, firewall, DNS, DHCP, and identity telemetry.
Target protected backup location with retention and restoration procedures.
Future controlled extension for cloud identity, logging, and network-security scenarios.