TwinGate: Secure Remote Access Solution

Zero Trust Network Access (ZTNA):

* Provides secure access to internal resources without exposing them to the internet.



High Performance:

* Optimized for low-latency connections.



Scalable for Teams:

* Supports up to 50 users securely and efficiently.



Easy Integration:

* Works seamlessly with existing infrastructure, including the NAS and network.



Why TwinGate?

* Enhanced Security: Ensures your sensitive data and applications are protected.

* Reliable Remote Access: Perfect for employees working from home or remote offices.

* Cost Effective: $5/user/month with annual plans.

* Provides secure access to internal resources without exposing them to the internet.

* Optimized for low-latency connections.

* Supports unilimited users securely and efficiently.

* Works seamlessly with existing infrastructure, including the NAS and network.





Why RustDesk ?

* Ensures complete data security by hosting your own server.

* Save on licensing fees compared to commercial remote desktop solutions.

* Tailored to Windfall Studios specific needs.

* Full control over your remote desktop infrastructure.

* No reliance on third-party servers for data privacy.

* Fast and secure connections for remote access.

* Optimized for low-latency desktop sharing.

* Works on Windows, macOS, Linux, iOS, and Android.

* Free to use with source code available for transparency and customization.

* Digital Ocean ($40/month)

* Seamless remote desktop access for unlimited users.

* Compatible with TwinGate for secure access.







RustDesk: Self-Hosted Remote Desktop Solution

Why DEC2770 Firewall?

* Safeguards Windfall Studios 10GbE network from cyber threats.

* Low latency ensures smooth collaboration and data transfers.

* Ready for expanding needs with robust performance and reliability.

* 10GbE Network Support: Ensures high-speed connectivity for modern network demands.

* Advanced Security: Protects against threats with built-in intrusion prevention and detection systems.

* User-Friendly Management: Intuitive dashboard for configuration and monitoring.

* Scalability: Supports small to large-scale network environments.



Placement:

Core gateway for the Windfall Studios network.

Connections:

Linked to Pro XG 10 PoE switch.

Secures access to:

NAS, APs, and remote offices.





DEC2770 Firewall: Enterprise-Grade Security Solution

OPNSense DEC2770 Firewall: Enterprise-Grade Security Solution

Why Pro XG 10 PoE Switch?

* Centralized Network Backbone: Connects critical devices like the NAS, firewall, and access points seamlessly.

* Scalable Infrastructure: Supports future growth with extra ports and 10GbE capacity.

* Simplified Deployment: PoE eliminates the need for separate power cables for connected devices.

* 10GbE Connectivity: Supports ultra-fast 10GbE connections for high-bandwidth applications.

* Power over Ethernet (PoE): Provides power and data over a single cable for all connected devices.

* Managed Switch: Advanced settings for VLAN, QoS, and network monitoring.

* Robust Hardware: Designed for reliability and continuous operation in demanding environments.

* Central switch for Windfall Studios' 10GbE setup.

* Management: Accessible via web-based or CLI interface for advanced configuration.



Core Network Role:

Central switch for Windfall Studios' 10GbE setup.

Connected Devices:

DEC2770 Firewall

TS-h1290FX NAS

U7 Pro XGS Access Points



















Ubiquiti Pro XG 10 PoE Switch: High-Performance Networking

Why U7 Pro XGS Access Points?

* Seamless Wireless Coverage: Provides strong, reliable Wi-Fi for all devices in the studio and remote areas.

* Optimized for 10GbE Network: Complements the Pro XG 10 PoE Switch for maximum performance.

* Future-Ready: Supports the latest wireless standards for scalability and longevity.

* 10GbE Backhaul Support: Ensures high-speed connectivity for demanding wireless applications.

* Wi-Fi 6 Technology Delivers faster speeds, improved capacity, and reduced latency.

* PoE-Powered: Simplifies installation, requiring only a single Ethernet cable for data and power.

* Enterprise-Grade Security: Built-in security features to protect against unauthorized access.





Connected to:

Pro XG 10 PoE Switch (10GbE ports).

Number of Units:

2 Access Points for complete studio coverage.

Power Source:

PoE (Power over Ethernet) via the switch.









Ubiquiti U7 Pro XGS Access Points: High-Speed Wireless

Why TS-h1290FX NAS?

 * Centralized Data Storage: Consolidates all project files, backups, and media in one secure location.

* 10GbE Integration: Seamlessly connects to the Pro XG 10 PoE Switch for high-speed file sharing.

* Reliable and Redundant: ZFS ensures data reliability, while RAID support adds redundancy.

* 10GbE and 25GbE Connectivity: Ultra-fast network interfaces for data-intensive workflows.

* AMD EPYC Processor: Enterprise-grade CPU for high-speed data processing and virtualization.

* ZFS File System: Advanced file system with data integrity, efficient snapshots, and real-time compression.

* High Scalability: Supports up to 12 bays with SSD or HDD for massive storage expansion.



Role:

Core storage for Windfall Studios' creative projects and backups.

Connected to:

Pro XG 10 PoE Switch via 10GbE.

DEC2770 Firewall for secure remote access.

Primary Use:

High-speed file sharing, remote access via TwinGate, and data backup.







TS-h1290FX NAS: High-Performance Data Storage

Seagate Exos Hard Drive: Enterprise-Grade Storage Solution

Why Seagate Exos?

* Reliable Data Storage: Ideal for backing up critical project files and media assets.

* Scalable Infrastructure: Supports expanding storage needs with multiple drive bays in the TS-h1290FX.

* Optimized for Enterprise Workflows: High performance ensures smooth operation for creatives.

* Massive Storage Capacity: Available in capacities up to 24TB for large-scale data needs.

* High Performance: 7200 RPM with sustained transfer rates for demanding workloads.

* Enterprise Reliability: Designed for 24/7 operation with a mean time between failures (MTBF) of 2.5M hrs.

* Advanced Security: Built-in features like Seagate Secure™ for data protection.



Integration:

Installed in TS-h1290FX NAS for centralized storage.

Quantity:

12 24TB for redundancy and performance (RAID 10).

Use Case:

Secure and reliable storage for project files, backups, and archives.







SFP+ and Cat8 Ethernet Cables : High-Speed Connectivity

Why SFP+ and Cat8?

 * Future-Proofing:

* Cat8 ensures compatibility with next-generation networks (up to 40Gbps).

* SFP+ provides high-speed connections for core infrastructure.

* Reliability:

* Shielding and DAC design eliminate interference and maintain consistent performance.

* Optimized for 10GbE:

* Both cables are tailored for the high-speed demands of Windfalls creative workflows.



SFP+ Cables : High-Speed DAC



Purpose:

* Direct-attach copper (DAC) cables for 10GbE network connections.

High Performance:

* Supports 10Gbps data rates with ultra-low latency.

Cost-Effective:

* Ideal for short-distance connections (up to 7 meters).

Plug-and-Play:

* Easy to connect network devices like switches, NAS, and access points.

Use Case:

* Connecting Pro XG 10 PoE Switch to the TS-h1290FX NAS and DEC2770.



Cat8 Cables: High-Speed Ethernet



Purpose:

* Shielded twisted pair (STP) cables for ultra-fast Ethernet connections.

Key Features:

* 10GbE and Beyond: Supports up to 40Gbps data rates with bandwidth up to 2GHz.

* Shielded for Minimal Interference: Perfect for environments with high electrical noise.

* Backward Compatibility: Works with Cat6a, Cat6, and Cat5e networks.

* Lengths: Available in flexible lengths for deployment.

Use Case:

* Connecting U7 Pro XGS Access Points, desktop devices, and other endpoints to the Pro XG 10 PoE Switch.



Windfall-Net: Network Architecture & Map



Core Network:

* DEC2770 Firewall connected to the Pro XG 10 PoE Switch.

Storage:

* TS-h1290FX NAS connected to the switch via 10GbE.

Wireless:

* U7 Pro XGS Access Points powered by the switch using PoE.

Remote Access:

* Secure access via TwinGate and RustDesk for remote access.

Storage Drives:

* Seagate Exos drives in the NAS for scalable and secure data.

Budget Estimate

Component Quantity Unit Price Total Cost



DEC2770 Firewall 1 $1,553 $1,553

Pro XG 10 PoE Switch 1 $838 $838

TS-h1290FX-7232P-64G 1 $4,899 $4,899

U7 Pro XGS Access Points 2 $358 $700

TwinGate Subscription 1yr. $10/yr. $1200 yr.

RustDesk Server Hosting 1yr. $40/mo. $480 yr.

Seagate Exos Hard Drives 12 $379 $4548

SPF+ Cables (possible sponsor) TBD

Cat8 Cables (possible sponsor) TBD

PSU (I have a couple) TBD

12 RU RACK (possible sponsor) TBD

20% Contingency 1 $2,842 $2,842



Total $17,050





Implementation Timeline:



Week 1-2:

* Procurement of hardware and software.

* Start Case study, gather neceserary equipment & team.

* Installation and configuration of the DEC2770 Firewall and Pro XG Switch.

Week 3:

* Setup of TS-h1290FX NAS with Seagate Exos drives.

* Deployment of U7 Pro XGS Access Points.

Week 4:

* Configuration of TwinGate for remote access.

* Deployment of RustDesk for remote desktop functionality.

Week 5:

* Testing and optimization of the network infrastructure.

* Documentation and training for staff.

Week 6:

* Start case study delivery for potential future sposors & partners.

* TBD

Conclusion:



This proposal outlines a robust, high-performance 10GbE network infrastructure tailored to meet the needs of Windfall Studios. With a focus on scalability, security, and performance, the proposed solution ensures seamless workflows and future-proofing for creative projects.