87 lines
3.1 KiB
Markdown
87 lines
3.1 KiB
Markdown
|
---
|
|||
|
|
title: Home Network
|
|||
|
|
type: reference
|
|||
|
|
tags: [network, lan, homelab, dns, proxy]
|
|||
|
|
updated: 2026-08-07
|
|||
|
|
---
|
|||
|
|
|
|||
|
|
# Home Network
|
|||
|
|
|
|||
|
|
> 当前网络结构与服务清单。WAN IP 为动态地址，仅作为记录时的状态参考。
|
|||
|
|
|
|||
|
|
## 拓扑概览
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
Internet
|
|||
|
|
│
|
|||
|
|
└─ gw · EdgeRouter X
|
|||
|
|
├─ pppoe0 · PPPoE · MTU 1492 · IPv6 PD /60
|
|||
|
|
├─ LAN66 · eth0 · 192.168.66.0/24 · GW 192.168.66.254
|
|||
|
|
│ ├─ gfw.windy.lan · 192.168.66.1
|
|||
|
|
│ ├─ dns.windy.lan · 192.168.66.36
|
|||
|
|
│ ├─ ubnt · 192.168.66.46
|
|||
|
|
│ └─ U6 Lite · 192.168.66.6
|
|||
|
|
└─ LAN55 · switch0 (eth1–eth3) · 192.168.55.0/24 · GW 192.168.55.254
|
|||
|
|
└─ UAP-AC-Lite · 192.168.55.5
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
| 项目 | 当前状态 |
|
|||
|
|
| --- | --- |
|
|||
|
|
| 网关主机 | `gw`（EdgeRouter X） |
|
|||
|
|
| WAN | PPPoE：`pppoe0`，MTU `1492`，IPv6 Prefix Delegation `/60` |
|
|||
|
|
| WAN IPv4 | `113.68.54.159`（动态，记录时地址） |
|
|||
|
|
| LAN66 | `192.168.66.0/24`，接口 `eth0`，网关 `192.168.66.254` |
|
|||
|
|
| LAN55 | `192.168.55.0/24`，接口 `switch0` / `eth1`–`eth3`，网关 `192.168.55.254` |
|
|||
|
|
| 跨网段连通性 | 默认双向可达；`LAN_IN` 规则虽已定义，但未绑定到接口 |
|
|||
|
|
|
|||
|
|
## 核心主机
|
|||
|
|
|
|||
|
|
| 主机 | IP | 服务与职责 |
|
|||
|
|
| --- | --- | --- |
|
|||
|
|
| `gfw.windy.lan` | `192.168.66.1`、`192.168.55.1` | PVE 上的双网 ImmortalWrt VM；OpenClash 旁路由，使用 fake-ip + TPROXY；`dnsmasq → clash :7874` |
|
|||
|
|
| `dns.windy.lan` | `192.168.66.36` | AdGuard Home DNS（TCP/UDP `53`）；上游 DoH：阿里、腾讯；DNSSEC 关闭。Mihomo 显式代理（systemd 服务） |
|
|||
|
|
| `ubnt` | `192.168.66.46` | UniFi Network Controller（Docker `v9.5.21`；inform `:9080`、UI `:8443`）及 Dockge |
|
|||
|
|
|
|||
|
|
## DHCP 与名称解析
|
|||
|
|
|
|||
|
|
### DHCP
|
|||
|
|
|
|||
|
|
- 由 EdgeRouter 提供 DHCP，租约时间为 **24 小时**。
|
|||
|
|
- LAN66 与 LAN55 的动态地址池均为 `.38`–`.243`。
|
|||
|
|
- DHCP 向客户端下发的 DNS：`192.168.66.36`（`dns.windy.lan`）。
|
|||
|
|
- 基础设施主机使用静态映射；已知示例：
|
|||
|
|
- `gfw` → `192.168.66.1`、`192.168.55.1`
|
|||
|
|
- `pihole` / `dns` → `192.168.66.36`
|
|||
|
|
- `ubnt-app` → `192.168.66.46`
|
|||
|
|
- `windy-pc` → `192.168.66.99`
|
|||
|
|
|
|||
|
|
### DNS 链路
|
|||
|
|
|
|||
|
|
```text
|
|||
|
|
客户端
|
|||
|
|
→ AdGuard Home（192.168.66.36:53）
|
|||
|
|
→ 默认网关上的 OpenClash（可能劫持 DNS）
|
|||
|
|
→ Clash DNS（:7874）
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
## 无线接入点
|
|||
|
|
|
|||
|
|
| AP | 所在网段 | 管理地址 | 控制器上报地址 |
|
|||
|
|
| --- | --- | --- | --- |
|
|||
|
|
| U6 Lite | LAN66 | `192.168.66.6` | `http://192.168.66.46:9080/inform` |
|
|||
|
|
| UAP-AC-Lite | LAN55 | `192.168.55.5` | `http://192.168.66.46:9080/inform` |
|
|||
|
|
|
|||
|
|
## WAN 端口转发
|
|||
|
|
|
|||
|
|
| 名称 | 目标 | 端口 |
|
|||
|
|
| --- | --- | --- |
|
|||
|
|
| Home Assistant | `192.168.55.11` | `8123` |
|
|||
|
|
| Transmission | `192.168.66.51` | `51413` |
|
|||
|
|
| SSH | `192.168.66.36` | `22` |
|
|||
|
|
| OpenVPN | `192.168.66.32` | `1194` |
|
|||
|
|
|
|||
|
|
## 代理边界
|
|||
|
|
|
|||
|
|
- `dns.windy.lan` 上的 Mihomo 是**显式代理**：没有启用 TUN，也不进行透明流量劫持。
|
|||
|
|
- 该主机的出站流量仍可能被 `gfw.windy.lan` 上的 OpenClash 规则处理，具体取决于流量路径与规则匹配结果。
|