inventory --host Clanker --host ScopeCreep --host Wurstcase --host FrontDesk --host Molasses --host hbg1 --host Ryzenshine
The stuff I run.
This is the current map of my VPSes, home box, FreeBSD router VM, and Windows workstation: what each machine does, what runs on it, and which parts are reachable from the outside.
Last checked: Clanker on · ScopeCreep, Wurstcase, FrontDesk, Molasses, hbg1, and Ryzenshine on . This page is a snapshot, not a live status board.
Clanker does most of the public-facing work: web apps, weird little Internet services, DN42 routing, Yggdrasil, and a chunk of my monitoring stack.
ScopeCreep is my second public edge. It routes DN42, joins Yggdrasil, backs up DN42 DNS, feeds the Looking Glass, stores backups, and doubles as my personal WireGuard exit when I need one.
Wurstcase is a tiny Frankfurt POP. Mostly routing: DN42, Yggdrasil, a Looking Glass backend, and just enough monitoring to know when it falls over.
FrontDesk is the boring-on-purpose host. It serves the main site and API, gives me private SMB storage, and holds encrypted Restic backups. The 1 TB disk also gives me somewhere to shove files that do not need to live on my workstation.
Molasses is an old Dell at home doing more work than it has any right to. It handles home DNS, a pile of Docker services, monitoring, backups, and the FreeBSD VM hbg1.
hbg1 is a FreeBSD VM on Molasses and my residential DN42 POP. It gives me a real residential IPv6 path, an external peering point, and an excuse to run BIRD on FreeBSD.
Ryzenshine is my Windows workstation: development, builds, Hyper-V lab VMs, Docker, and the IIS origin for RandomSteamBeta.
This is the network side of the mess: normal Internet access, private links, DN42, and Yggdrasil. The overlay hostnames only work when you are actually on those networks.
The normal Internet-facing stuff lives here: web apps plus a handful of small protocol servers.
AS4242420425
Clanker is one of my main DN42 edges. It runs BGP, authoritative DNS, service ingress, the Looking Glass frontend, and several external peerings.
AS4242421732AS4242420207AS4242420842It also ties together ScopeCreep, Wurstcase, the residential hbg1 POP, and the rest of my DN42 routing.
Clanker also has a Yggdrasil node and routed subnet, so several of my services have a second life over Ygg.
AS4242420425
Routes DN42, keeps a secondary copy of my authoritative DNS, and supplies routing data to the Looking Glass.
AS4242422189 — controlled transitAS4242423914 — controlled transitAS4242420253 — own-prefix-only / no transitInternal iBGP with Clanker and with hbg1 over IPv6 / MP-BGP / RFC8950.
ScopeCreep is also on Yggdrasil and accepts public peers.
AS4242420425
My Frankfurt DN42 POP. It peers with Silverha and forwards the traffic I have chosen to carry back toward Clanker.
AS4242420762 — external eBGP / controlled transitInternal iBGP with Clanker.
Wurstcase also runs Yggdrasil and accepts public peering on TCP 54321.
hbg1 is the odd one out: a FreeBSD DN42 POP running from my residential connection on Molasses.
AS4242420425
AS4242422227 — external eBGP / own-prefix-only exportInternal iBGP with Clanker and ScopeCreep over WireGuard links. hbg1 uses native residential IPv6 and does not provide general DN42 transit.
My workstation reaches the private network and DN42 over WireGuard.
I like running weird networks, and I am happy to peer with other people doing the same. The landing pages have the current details so I do not have to keep the same peering config written in three places.
DN42 is a community-built network where people run BGP, announce their own address space, break things, fix them, and learn how routing works. Mine is AS4242420425, spread across Clanker, ScopeCreep, Wurstcase, and hbg1.
If you want to peer, the landing page has the useful bits: POPs, tunnel options, prefixes, routing policy, Looking Glass links, and how to reach me.
dn42.kgivler.com is the clearnet mirror of joyfulreaper.dn42.
Yggdrasil is an encrypted IPv6 overlay network. I have nodes in a few places and accept public peers, including on ScopeCreep and Wurstcase.
The Ygg landing page has the current peer addresses, ports, node info, and locations.
These are the things you can actually connect to. Some are normal web apps; some expect a client that remembers the Internet existed before HTTP won everything.
A live, sanitized look at the unsolicited TCP connections hitting my sensors. You can reach it on the clearnet, DN42, Yggdrasil, or I2P.
noise.kgivler.comI mirror this site onto a few different networks because having one website on four Internets amuses me.
www.kgivler.comkgivler.dn42site.ygg.kgivler.comb32.i2p mirrorGive it a public Steam library and it picks something for you to play.
Push a button, land on some random corner of GitHub.
A grab bag of small developer and sysadmin utilities.
tools.kgivler.comPeek at my DN42 routes without needing shell access to a router.
lg.kgivler.comThese are tiny servers for old or small Internet protocols. I run them because they are fun, easy to understand, and still perfectly good at doing one little job.
gopher.kgivler.com:70gemini.kgivler.com:1965finger.kgivler.com:79qotd.kgivler.com:17HTTP/JSON APIdaytime.kgivler.com:13echo.kgivler.com:7discard.kgivler.com:9Browser-based IRC for the project channels and general programmer chatter.
chat.kgivler.comThe Matrix side of the same general dev / project hangout.
#joyfulreaper-dev:kgivler.com
Backup authoritative DNS for my DN42 zones. Clanker is primary.
Private routing backend for the Looking Glass on Clanker.
The main site lives here and nginx serves both names below.
kgivler.com www.kgivler.comA small .NET backend used by the site.
RandomSteamBeta still originates from IIS on my workstation and gets out through Cloudflare Tunnel.
randombeta.kgivler.comThe boring but important stuff lives here: monitoring, backups, DNS, routing, storage, and the tools I use to keep the rest of this mess running. I leave private management URLs and addresses off the public page.
My own monitoring stack. The Dashboard, Gateway, Archive, GitActivity service, and Agents collect the useful bits, with NATS JetStream in the middle.
My personal WireGuard exit for hotel Wi-Fi, coffee shops, and other networks I do not want to trust. It is not a public VPN service.
Wurstcase gets normal OS maintenance and Beszel updates. Host backups are still on the to-do list.
I keep this box simple: native services, no Docker, and no general-purpose web-app pile.
I do not include Matrix history or uploaded media in this config-focused backup. It is useful for rebuilding services, not a full bare-metal recovery, and I have not done a complete restore test yet.
Molasses takes a live backup of the VM to FrontDesk every day and keeps 14 generations. That is separate from Molasses’s normal Restic backups.
The backup image and transfer checked out. I still have not done the part that really matters: booting a full recovery.
This is still the weak spot in the backup story. I have not finished reviewing recovery coverage for the Windows host.
I may earn a commission if you sign up through these links.
One of the stranger things on Clanker: the same little experiment showing up over web, Gopher, Gemini, and multiple networks.
tcpnoise watches the random connections that hit my sensors and feeds a cleaned-up version of them into Noise Observatory.
ScopeCreep runs one of the public-facing tcpnoise sensors.
Source