Kyle Givler

inventory --host Clanker --host ScopeCreep --host Wurstcase --host FrontDesk --host Molasses --host hbg1 --host Ryzenshine

Systems

The stuff I run.

Seven audited systems: Clanker, ScopeCreep, Wurstcase, FrontDesk, Molasses, hbg1, and Ryzenshine. This inventory covers my VPSes, home infrastructure, residential router VM, and Windows development workstation: where things run, how they’re reachable, and what they do.

Clanker: · ScopeCreep, Wurstcase, FrontDesk, Molasses, hbg1, and Ryzenshine: · Inventory snapshots, not real-time monitoring.

Systems

Clanker

Audited system

Application host, public Internet services, DN42 router / BGP node, Yggdrasil node, and monitoring / operations host.

Operating system
Ubuntu 26.04.1 LTS
Architecture
x86-64
CPU
2 AMD EPYC Rome vCPUs
Memory
3.8 GiB RAM
Storage
33 GiB root disk

ScopeCreep

Audited system

Public VPS edge, DN42 routing node, Yggdrasil node, secondary authoritative DN42 DNS, Looking Glass backend, monitoring / backup node, and personal privacy-VPN gateway.

Operating system
Debian GNU/Linux 13 (trixie)
Architecture
x86-64
Virtualization
KVM/QEMU
CPU
2 AMD EPYC Rome vCPUs
Memory
3.8 GiB RAM
Storage
35 GiB root disk

Wurstcase

Audited system

A small Frankfurt, Germany POP: DN42 POP / router, Yggdrasil node, Looking Glass backend, and monitoring infrastructure.

Operating system
Debian GNU/Linux 13 (trixie)
Architecture
x86-64
Virtualization
KVM/QEMU
CPU
1 AMD EPYC 7443P vCPU
Memory
3.8 GiB RAM
Storage
25 GiB root disk
Location
Frankfurt, Germany

FrontDesk

Audited system

A clean client-facing host for static websites and .NET APIs, with private SMB file storage, encrypted Restic backup storage, and monitoring. Bulk storage holds files moved off my workstation to free up local disk space.

Operating system
Debian GNU/Linux 13 (trixie)
Architecture
x86-64
Virtualization
KVM/QEMU
CPU
2 virtual Intel Xeon Skylake CPUs
Memory
2.9 GiB RAM
System disk
40 GB
Storage disk
1 TB

Molasses

Audited system

Home infrastructure and DNS server, Docker host, monitoring, and private Restic backup infrastructure. Also hosts the FreeBSD virtual machine hbg1, a residential DN42 POP.

Hardware
Dell Inspiron 3847 desktop
Operating system
Debian GNU/Linux 13 (trixie)
CPU
Intel Core i3-4170 · 2 cores / 4 threads · 3.70 GHz
Memory
7.7 GiB RAM
Storage
1 TB WD Blue 7200 RPM mechanical HDD
Uplink
Residential Wi-Fi

hbg1

Audited system

A FreeBSD virtual machine on Molasses: residential DN42 POP / router, internal iBGP router, external DN42 peering point, and native residential IPv6 test point. Also a FreeBSD routing / BIRD experiment.

Operating system
FreeBSD 15.1-RELEASE
Architecture
amd64
Virtualization
KVM on Molasses
CPU
1 vCPU · Intel Core i3-4170 · 3.70 GHz
Memory
Approximately 1 GiB RAM
Storage
8 GiB virtual disk

Ryzenshine

Audited system

Windows development / build workstation, Hyper-V lab host, and Docker container build host. Runs networking / lab VMs and the IIS origin for RandomSteamBeta.

Operating system
Windows 11 Pro
CPU
AMD Ryzen 7 3700X · 8 cores / 16 threads
Memory
Approximately 80 GiB RAM
Motherboard
ASRock X570 Steel Legend WiFi ax
Storage
Multiple NVMe / SATA disks
Virtualization
Hyper-V + Docker Desktop

Networks

Public Internet services, private infrastructure, and DN42 / Yggdrasil connectivity across the systems below. Overlay hostnames require connectivity to their respective networks.

Clanker

Public Internet

Public

Web applications and small Internet protocols, reached through the public hostnames listed below.

DN42

DN42

AS4242420425

BGP routing, authoritative DNS, web/service ingress, a Looking Glass, and peers/transit relationships connecting additional JoyfulReaper POPs.

External BGP peers

  • Baragoon AS4242421732
  • RoutedBits AS4242420207
  • HEADSCARF AS4242420842

Within AS4242420425

Routing relationships with ScopeCreep, Wurstcase, the hbg1 residential POP, and the overlay gateway.

DN42 services and hostnames

ScopeCreep

DN42

DN42

AS4242420425

DN42 routing, secondary authoritative DNS, and a Looking Glass backend.

External BGP peers

  • iEdon AS4242422189 — controlled transit
  • Kioubit AS4242423914 — controlled transit
  • MOE233 AS4242420253 — own-prefix-only / no transit

Within AS4242420425

Internal iBGP with Clanker and with hbg1 over IPv6 / MP-BGP / RFC8950.

Yggdrasil

Yggdrasil

ScopeCreep participates in Yggdrasil and offers public Yggdrasil peering.

Wurstcase

DN42

DN42

AS4242420425

Frankfurt DN42 POP / router, forwarding selected traffic between Silverha and Clanker.

External BGP peers

  • Silverha DE1 AS4242420762 — external eBGP / controlled transit

Within AS4242420425

Internal iBGP with Clanker.

Yggdrasil

Yggdrasil

Wurstcase is a Yggdrasil node and overlay router, with public peering on TCP 54321.

hbg1

Residential POP

DN42

The FreeBSD virtual machine hbg1 runs on Molasses and serves as a residential DN42 POP.

AS4242420425

External BGP peers

  • PuduNet NY01 AS4242422227 — external eBGP / own-prefix-only export

Within AS4242420425

Internal iBGP with Clanker and ScopeCreep over WireGuard links. hbg1 uses native residential IPv6 and does not provide general DN42 transit.

Ryzenshine

Private infrastructure & DN42

PrivateDN42

The workstation connects to private infrastructure and DN42 over WireGuard.

Public services & protocols

Applications, protocol services, and supporting infrastructure on the audited systems. These are audited inventory entries, not availability checks. Non-HTTP endpoints need a suitable client.

Clanker

Web applications Public

DN42 Looking Glass

Inspect DN42 routing through the Looking Glass.

lg.kgivler.com

Small Internet protocols Protocol

HappyGopher Source
Gopher · TCP 70gopher.kgivler.com:70
HappyGemini Source
Gemini · TLS 1965gemini.kgivler.com:1965
HappyFinger Source
Finger · TCP 79finger.kgivler.com:79
HappyQOTD Source
Quote of the Day · TCP + UDP 17qotd.kgivler.com:17HTTP/JSON API
HappyDaytime Source
Daytime · TCP + UDP 13daytime.kgivler.com:13
HappyEcho Source
Echo · TCP 7echo.kgivler.com:7
HappyDiscard Source
Discard · TCP + UDP 9discard.kgivler.com:9

ScopeCreep

Secondary authoritative DNS

DN42

Secondary DN42 DNS for the JoyfulReaper zones, with Clanker as the primary.

Looking Glass backend

Private

Supplies routing information to the Looking Glass frontend on Clanker. Backend access is private/internal.

FrontDesk

Kgivler.Api

A separate .NET application supporting the site’s API functionality.

Ryzenshine

RandomSteamBeta

IIS provides the active origin for RandomSteamBeta, published through Cloudflare Tunnel.

randombeta.kgivler.com

Internal & operations

Hosting, home infrastructure, development, and operations tooling. Private/internal components are listed by role, without management endpoints.

Clanker

Mission Control

Private

Dashboard, Gateway, Archive, GitActivity, and the host Agent handle monitoring, telemetry, and activity. NATS JetStream provides messaging and persistence.

Source

Operations tooling

Private
  • Beszel + Beszel Agent — host monitoring.
  • Restic REST Server — backup storage service.
  • Dozzle — container log viewing.
  • Dockge — container stack management.
  • WSIWOT — What Should I Work On Today.
  • SmolSearch backend — search backend.
  • Automated backups / maintenance jobs — routine upkeep.

Infrastructure components

  • nginx — web serving / reverse proxy.
  • BIRD — BGP routing.
  • NSD — authoritative DNS.
  • Unbound — DNS resolution.
  • Cloudflare Tunnel — service ingress.
  • WireGuard — network tunnels.
  • Yggdrasil — overlay networking.

ScopeCreep

Operations tooling & backups

Private
  • Mission Control Agent — host telemetry.
  • Beszel Agent — host monitoring.
  • Dozzle Agent — container logs.
  • Dockge — container stack management.
  • Restic REST Server — backup storage service.
  • Backup jobs / redundant backups — ScopeCreep backs up to both Clanker and FrontDesk and stores backups for those hosts.

Personal privacy VPN

Private

A personal WireGuard privacy-VPN gateway for my devices on untrusted / public Wi-Fi. Access is private/internal.

Wurstcase

Native infrastructure

Private
  • BIRD — DN42 BGP routing.
  • BIRD Looking Glass proxy — private routing backend.
  • Mission Control Agent — host telemetry.
  • Beszel Agent — host monitoring.

Backups & maintenance

Private

OS maintenance and Beszel Agent updates are in place. Wurstcase’s host backups are not yet configured or verified.

A deliberately small network POP with native services. Docker is not installed, and there are no container workloads or general web applications.

FrontDesk

Private storage & backups

Private
  • Samba — private SMB file sharing and bulk storage for files moved off my workstation.
  • Restic backup storage — encrypted infrastructure backups.
  • Scheduled backup maintenance — retention, pruning, and integrity checks for FrontDesk’s recovery-configuration backups.

Connectivity & monitoring

Private
  • Cloudflare Tunnel — outbound tunnel connectivity.
  • Mission Control Agent — host telemetry.
  • Beszel Agent — host monitoring.

Molasses

Home services & monitoring

Private
  • Pi-hole + Unbound — home DNS.
  • Docker workloads — Uptime Kuma, The Lounge, Scrutiny, PairDrop, NetAlertX, Matrix Synapse / PostgreSQL, Dozzle Agent, and Dockge.
  • Mission Control Agent — host telemetry.
  • Beszel Agent — host monitoring.

Private backups

Private
  • Molasses — configuration and selected application state backed up daily with Restic to Clanker and FrontDesk.
  • hbg1 — separate daily live VM backups to FrontDesk.
  • Maintenance — weekly maintenance and 90-day retention for Molasses’s Restic backups on FrontDesk.

Matrix history and uploaded media are intentionally excluded from Molasses’s configuration-focused backup. This backup scope does not cover full-machine recovery; restoration has not been verified.

hbg1

Routing & traffic control

Private
  • BIRD 2.19.1 — DN42 routing and ROA validation.
  • WireGuard — links to Clanker, ScopeCreep, and PuduNet NY01.
  • PF — host firewall.
  • IPFW + dummynet — PuduNet traffic limited to 5 Mbps in each direction.

VM backups

Private

Daily live VM backups from Molasses to FrontDesk, with 14 generations retained. These are separate from Molasses’s configuration-focused Restic backups.

Backup image integrity and transfer were verified during the audit; a full recovery boot has not been tested.

Ryzenshine

Development & lab workloads

Private
  • Windows development workstation — development work and source / application builds.
  • Hyper-V — networking and lab VMs.
  • Docker Desktop — container builds and local development.

Backup audit status

Private

Windows host backup / recovery coverage was not fully audited and remains to be reviewed.

Infrastructure / Hosting

VPS providers I use

I may earn a commission if you sign up through these links.

Experiments / Weird Internet

tcpnoise

Experiment

A manually launched network-noise / connection experiment on Clanker. The live playground lives in the Lab.

tcpnoise on ScopeCreep

Experiment

A public network-noise / connection experiment on ScopeCreep.

Source