Safety concerns

[Rotaru Cosmin Leonard]

I am a network noob geek. I'm having my first Cisco CCNA V7 course this Saturday. I know the basics of a network, but I need to learn so much more.

My LAN is working behind a Bitdefender BOX 2 gateway/firewall.

I am installing FreeNAS on a pc inside the network for SMB data backup/ multimedia share inside the network. On the FreeNAS I'm planning to run a VM Ubuntu server with Pi-Hole on it for blocking the adds. All good here...hopefully!

First question:
I also need to run a Blynk server (IoT hub thing that runns on java) that I can access from outside the network too by opening a port for the Blynk server only. Can I run that on the same Ubuntu server safely without exposing the FreeNAS to outside threats?

What is the best way to deal with it?

Second question:
I had to install the FreeNAS on a 112gb SSD. With the Kingston USB 3.0 it was taking forever to boot and run. Other than the swap, for what else I can use the extra storage? Can I use it for running VMs?

 

[Alecmascot]

I had to install the FreeNAS on a 112gb SSD. With the Kingston USB 3.0 it was taking forever to boot and run. Other than the swap, for what else I can use the extra storage? Can I use it for running VMs?

Search for "jails on boot drive"

 

[Rotaru Cosmin Leonard]

All I could find was that it is not possible :D . So I found a better Usb flash drive around. I also found an old Raspberry pi B+ V1.2 . Is this going to solve all the problems/concerns described above?

 

[Samuel Tai]

You should create a DMZ on the BitDefender firewall for your IOT devices, and for the Blynk server, which I understand you intend to run on the Raspberry Pi. I don't recommend exposing the Blynk server directly to the Internet through the firewall. Instead, if you need remote access to Blynk, you should use some sort of VPN. One possibility is WireGuard on the Pi.

 

[Rotaru Cosmin Leonard]

Thanks for you response!

I'm afraid I cannot set up a DMZ on the Bitdefender BOX 2 (Or maybe I don't know how. I could not find anything related to that).

why would I run a VPN on the raspberry pi B+ and not the FreeNAS server? Isnt that too weak?

 

[danb35]

All I could find was that it is not possible

Not officially supported, but possible. @Patrick M. Hausen has posted a method for this, but it's all CLI work.

 

[Patrick M. Hausen]

Here you go:

HOWTO: setup a pair of larger SSDs for boot pool and data

Moderator Warning: This HOWTO will damage the ability of your TrueNAS appliance to properly maintain itself, will break the ability to replace failed drives, and may cause problems with upgrades and updates. TrueNAS is not designed to do this sort of partitioning, and the developers are not...

www.ixsystems.com