---

gw.stargrave.org ¶

This is my main server, that hosts everything. It is the only one connected to the Internet. ISP cable is not attached directly, but through another 100Mbps switch, for electrical separation.

CPU	Intel Xeon E-2356G 6-cores 3.2GHz (UHD Graphics P750, Rocket Lake)
RAM	128GB DDR4 ECC
HBA	Avago SAS
HDD	mirror of 2x 16 TB SATA mirror of 2x 20 TB SATA RAIDZ of 4x 15kRPM 450 GB SAS + 2x cold spare
Tape	external SAS LTO5
NIC	2x 1Gbps Ethernet, 1x SFP+ DAC and 1x SFP+ 8P8C 10Gbps Ethernet
UPS	520W

• FreeBSD 13.2 amd64 OS
• ipfw firewall and NAT
• dummynet traffic scheduler
• Jail virtualization
• daemontools-encore service manager
• ucspi-tcp and go.cypherpunks.ru/ucspi UCSPI utilities
• OpenSSH remote login server, built without OpenSSL
• isc-dhcp44 DHCP server
• dhcpcd DHCP client
• native rtadvd IPv6 RA daemon
• chrony NTP server
• DNS related:
  • NSD authoritative master server
  • CurveDNS DNSCurve server
  • Unbound recursive cache
  • dqcache recursive cache with DNSCurve
  • zdns zones generator
• NNCP
• Postfix MTA
• Postgrey greylister
• go-msgauth’s DKIM-signer
• mlmmj maillist manager with public-inbox archives manager
• godlighty HTTP and CGI server
• HAProxy TCP proxy
• Git
• Fork of dht-bootstrap BitTorrent DHT bootstrap server
• github.com/gortc/stund STUN server
• go.stargrave.org/gofingerd finger daemon
• rsync daemon
• WireGuard VPN server
• Yggdrasil overlay network
• LFTP FTP-mirroring tool
• glocate file indexing and searching tool
• sgmon monitoring
• collected system statistics collection daemon
• dmon network monitoring
• uploader
• SGBlog blog/phlog/gemlog engine
• zeasypki for managing X.509 TLS certificates

Next: beta.stargrave.org, Previous: Cryptography tools, Up: My hardware and software details