KYAG

I try to keep the hardware setup simple:

 
 
VM side of things is more complicated. As you can tell I stopped trying to make the diagram pretty

 
Red is the WAN network
Black is the LAN network with a route to the internet
Blue is the internal network for accessing storage
The docker network is actually a separate natted network and should be a different color
 
Dotted line indicates inactive connection.

Prefer to leave your tears away from my networking gear.