Saphira networking and self-hosting

A home server may sit behind an ISP router. A business installation may sit behind several routed VLANs and a dedicated edge firewall. A remote server may already have public addresses. A multi-site installation may join all of those places with a VPN. These are different topologies, not four sizes of the same router.

• Compare the deployment models
• Learn IPv6 foundations
• Understand VPNs

Internet
    │
    ├── edge router or firewall
    │       ├── public services: MailDragon, webDragon, HAProxy
    │       └── private services: management, databases, VPN
    │
    └── routed LANs, VLANs, Wi-Fi, and remote sites

The important question is not whether a service is at home or in a datacentre. It is which interface receives the traffic, which route carries it, and which firewall rule permits it.

With the appropriate packages and careful design, Saphira can be the network-services host or router itself: DHCP and DNS can serve local networks, RA and SLAAC can establish IPv6, Prefix Delegation can feed downstream LANs, OVS and VLANs can separate traffic, nftables can enforce policy, HAProxy can publish selected services, and WireGuard can connect private networks.