A real picture of Joe standing in a desert, face & eyes covered in military sand-goggles, deployed on operations with the CAF circa 2014/15.
Joe deployed on operations with the CAF circa 2014/15.

About Core Lab: Cybersecurity Meets Homelabbing

Most tech content shows you what’s possible with an unlimited budget and a full 42U server rack. Core Lab shows you what’s possible with the hardware you already have.

The Mission: Building Your Digital Fortress

I'm Joe and I started this site to bridge the gap between high-end security and practical self-hosting. Whether you're running a Plex server or a complex firewall, you shouldn’t have to choose between convenience and privacy. This isn't just a tutorial site; it’s a lab notebook for the modern, sustainable, and security-conscious self-hoster.

All Production Systems Operational
Host: corelab.tech | Telemetry: status.corelab.tech

Live Bare-Metal Infrastructure Telemetry

Core Lab runs entirely on dedicated bare-metal hardware powered by an AMD Ryzen 7 3700X (8C/16T) and NVIDIA RTX 3060 12GB. Every benchmark, setup guide, and post-mortem published here is tested on live production infrastructure, never hypothetical cloud sandboxes.

99.98%
30-Day Uptime
Continuous Synthetic Ping
61
Live Containers
12 Modular Docker Stacks
RTX 3060 12GB
Hardware Acceleration
NVENC Transcoding + AI ML
~14ms RTT
Offsite Backup Link
Encrypted WireGuard Tunnel
Actively Monitored Core Services
OPNsense IDS/IPS SWAG NGINX + CrowdSec Ghost CMS Production WireGuard Offsite Tunnel AdGuard Home Resolver ZFS Storage Pool Jellyfin Media Core
View Real-Time Status Page → Monitored via self-hosted Uptime Kuma with automated incident alerting.

The Pedigree: Forged in Operational Reality

I don’t rely on paper certifications; I rely on two decades of operational reality. My expertise wasn't gained in a classroom: it was forged in zero-fail environments where the network had to work.

When there's a chance that if your network or services go down, people die, or military tactical decisions stop, you learn to never let it fail.
  • Military Veteran: As a decorated veteran of the Canadian 🇨🇦 Armed Forces, I spent years securing tactical networks in global combat zones (from deserts to the tropics). I learned the hard way how to build resilient infrastructure under "unintentional chaos engineering" conditions.
    • I've deployed to Afghanistan (OP ATHENA, 2011), Kuwait (OP IMPACT, 2015), and numerous other unnamed training & support missions across Canada & for our Allies in Europe & Central America.
      • I have slept on the floor of server rooms in the field during critical operations or maintenance windows, to ensure if something does go wrong, or we need to ramp up, I was ready.
  • Cybersecurity Lead: I’ve served as the Principal Technical Security Lead for major International Summits, defending critical infrastructure during high-stakes diplomatic events.
  • Blue Team Professional: By day, I defend government networks from real-world threats. By night, I apply those same "Mission Critical" principles to the home lab.
My official service medals & awards, citations etc... 2 campaign medals, 1 Queen's Diamond Jubilee, 5 coins, 1 Command Commendation.
My official service medals & awards, citations etc...
Pro Patria!

The Core Lab Philosophy

1. Practicality over Prestige

You don’t need an enterprise-grade server room to run a production-grade home network. I focus on repurposing desktops, optimizing small form factor PCs, and squeezing every bit of value out of "yesterday's" hardware. People underestimate how powerful modern computers are; even a 5-year-old desktop has a lot of utility and life left in it. Think Function over Form (Functionalism)!

2. The "Day 2" Mindset

Anyone can follow a guide to install a service. The real work happens on Day 2: hardening the security, tuning the ZFS storage, automating backups, and ensuring the system stays up when things go sideways. Days 30 through to 180 involve optimization, ongoing maintenance and eventual modernization & updates. I don't see anyone covering almost any of that!

3. Privacy by Design

Coming from a background involved in the "5 Eyes" intelligence community, I’ve seen the importance of data sovereignty firsthand.

I believe in an internet where privacy is the standard, not an add-on.

My guides help you reclaim your data without exposing your network to the world. Operating from Canada also brings distinct infrastructure realities that generic American homelab tutorials completely overlook. Bypassing rigid telecom equipment from providers like Bell or Rogers, keeping personal and family data strictly within sovereign Canadian borders rather than offshore cloud data centres, and managing continuous power draw against tiered time-of-use hydro rates require deliberate architecture. Core Lab designs for these realities from day one.

A picture I captured in 2011 my 1st day in KAF - Kandahar Airfield. A welcome sign with the NATO & Afghan flags side by side.
Welcome to Kandahar Airfield, get ready to run the networks!

The Active Lab: Real Hardware, Zero Fluff

Every tutorial, benchmark, and firewall rule on this site is tested and deployed on physical bare-metal hardware right here in my own lab, never simulated inside disposable cloud instances. My 24/7 production baseline includes:

  • Perimeter Defence: Dedicated bare-metal OPNsense firewall with multi-VLAN segmentation, intrusion detection, and automated threat feeds.
  • High-Speed Core: 10G SFP+ optical backbone interconnecting mass storage, compute clusters, and daily workstations.
  • Resilient Storage: 18-drive Monolith ZFS array (192TB+ raw storage) built on OpenMediaVault and Debian.
  • Application Stacks: 60+ containerized services running across 12 isolated Docker Compose stacks, engineered for sub-100W idle efficiency.
Full Infrastructure Deep Dive
Tour the Core Lab Digital Fortress
Explore my complete rack layout, drive configuration, SAS host bus adapters, and 12-stack Docker Compose architecture.

Connect with the Lab

I originally started this site as my own documentation library. If my solutions help you solve a headache in your own lab, then the mission is a success!

If you are looking for where to start building or upgrading your own self-hosted deployment, explore the cornerstone pillars of the lab:

A picture of my coffee setup brewing a latte macchiato: What fires me up in the morning, besides fresh CVEs, a Philips Series 3300 Automatic Espresso Machine!
What fires me up in the morning, besides fresh CVEs, a Philips Series 3300 Automatic Espresso Machine!

All opinions expressed here are my own and do not reflect those of my employer in any way, shape, or form. Core Lab is completely independent and self-funded. I do not accept sponsored product placements or vendor scripts. If I recommend a piece of hardware or software, it is because it survived hands-on testing on my own bench.


Core Lab Reader Survey!

If you have a couple minutes, please hop over to the Core Lab Reader survey and give me your two cents about what you're interested in reading or learning about, what you'd like to see more of, and how Core Lab can better help you achieve your Home Lab / Self-Hosted happiness!

Thanks so much!

What's Next?