01 / Connect
Give the lab a boundary.
Plan the firewall, switch and cables together. The diagram teaches a possible starter layout; your existing network may already cover some roles.
Field guide / 01 · Interactive home lab
Start small.
Build something real.
One network. One compute host. Room to learn.
Follow the connections, explore each device, and find the checks that matter before you buy.
Compute: choose one tier. You do not need all three PCs.
Internet / upstreamChoose your compute tier
One host is enough
Separate copies.
Test the restore.
Use what you have / Make it yours
Your first lab might
already be on your desk.
An existing desktop or laptop can be a place to learn. Check its hardware, operating system and recovery plan before changing it. Use the mini-PC tiers when you need a separate host.
Work through the compute decision
Desktop
Laptop02 / Choose
One host. Your workload.
Budget, balanced and advanced are alternatives. The Pi is optional. Compare exact configurations and current software requirements before choosing.
03 / Recover
Build a way back.
Keep separate configuration and data copies, then practice a restore. Open the assembly checklist ↗
Network edge
Protectli-style firewall appliance
Network foundation
Controls traffic between the internet and the lab. A separate appliance lets the network keep running while you experiment with compute.
Workload fit: Learning routing and firewall rules.
Before you choose
- Choose the exact appliance and check its NIC chipset against current OPNsense / FreeBSD support.
- Match WAN/LAN port count, port speeds and cables to the switch and internet service.
- Size memory, storage and cooling for VPN, inspection and the actual traffic load.
Planning guide · A retailer listing has not been selected for this role. As an Amazon Associate I earn from qualifying purchases. Purchase links are labelled “paid link”.
Network fabric
TP-Link TL-SG108E
Network foundation
Provides the wired connection points. VLAN settings must agree on the firewall, switch and any VLAN-aware endpoints.
Workload fit: Wired lab connections.
Before you choose
- Confirm the exact hardware revision and regional firmware; the US page currently labels V6.
- Review VLAN tagging, PVID and management access in the manual for that revision.
- Count the uplink and endpoint ports; a firewall connection consumes a port too.
Planning guide · A retailer listing has not been selected for this role. As an Amazon Associate I earn from qualifying purchases. Purchase links are labelled “paid link”.
Starter compute
Intel N100 mini PC
Choose one compute tier
One compute host runs your experiments. Start with a defined workload; the processor name alone does not identify a complete computer.
Workload fit: A focused Linux learning host.
Before you choose
- Select the brand and model first; verify the complete system warranty and firmware support.
- Check installed RAM, expansion limits, storage protocol and included power supply.
- Confirm NIC chipset, OS support and virtualization settings for your chosen software.
Planning guide · A retailer listing has not been selected for this role. As an Amazon Associate I earn from qualifying purchases. Purchase links are labelled “paid link”.
Balanced compute
Beelink SER5 PRO Mini PC
Choose one compute tier
An alternative to the budget or advanced host. Match the actual configuration to your guests and services before buying.
Workload fit: Linux service experiments.
Before you choose
- Match the existing SER5 PRO name to an exact CPU, RAM, storage and seller configuration.
- Confirm NIC chipset, supported operating systems and current firmware documentation.
- Check memory expansion, storage layout and virtualization settings against your hypervisor.
A current retailer selection is linked in the Gear Room. Confirm its configuration before buying. As an Amazon Associate I earn from qualifying purchases. Purchase links are labelled “paid link”.
Advanced compute
MINISFORUM UM890 Pro
Choose one compute tier
An alternative compute host for a more demanding plan. Choose the configuration for the job, with a budget for memory, storage and recovery.
Workload fit: A larger planned VM environment.
Before you choose
- Distinguish barebone from prebuilt variants: verify RAM, SSD, OS and what the box includes.
- Confirm the exact memory/storage configuration and the current manufacturer limits.
- Check NIC chipset, firmware virtualization settings and your hypervisor compatibility.
Planning guide · A retailer listing has not been selected for this role. As an Amazon Associate I earn from qualifying purchases. Purchase links are labelled “paid link”.
Utility / DNS
CanaKit Raspberry Pi 5 Kit / 8GB
Optional utility node
Useful for keeping a small utility separate from the main compute host. You can also run a supported service on your chosen host instead.
Workload fit: Pi-hole after checking its current OS requirements.
Before you choose
- Verify the exact CanaKit SKU and contents; 8GB does not identify the cooler, power supply or storage bundle.
- Match the Pi 5 power supply, active cooling, enclosure and boot media.
- Check Arm64 support for each OS, container image and dependency.
A current retailer selection is linked in the Gear Room. Confirm its configuration before buying. As an Amazon Associate I earn from qualifying purchases. Purchase links are labelled “paid link”.
Recovery
WD Elements-style USB backup drive
Recommended separate backup
Experiments are easier to recover from when a working copy and a backup are separate. A drive becomes useful recovery storage only with a tested restore process.
Workload fit: Configuration and data copies.
Before you choose
- Select capacity and exact portable/desktop model; check USB connector, cables and any separate power requirement.
- Confirm the filesystem and backup software support your chosen operating system.
- Plan retention, encryption recovery and a disconnected or separately protected copy.
Planning guide · A retailer listing has not been selected for this role. As an Amazon Associate I earn from qualifying purchases. Purchase links are labelled “paid link”.
Explore the lab
Follow a connection.
Select a device to learn its role, see compatibility checks and open its Gear Room buying guide.
Choose just one of the three compute alternatives.