aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--about/about.css (renamed from about.css)0
-rw-r--r--about/arfnet2.html1168
-rw-r--r--about/arfnet2.pdfbin0 -> 141075 bytes
-rwxr-xr-xabout/index.html (renamed from about.html)67
-rw-r--r--index.html2
5 files changed, 1170 insertions, 67 deletions
diff --git a/about.css b/about/about.css
index 5af0aeb..5af0aeb 100644
--- a/about.css
+++ b/about/about.css
diff --git a/about/arfnet2.html b/about/arfnet2.html
new file mode 100644
index 0000000..d4f7488
--- /dev/null
+++ b/about/arfnet2.html
@@ -0,0 +1,1168 @@
+<!doctype html>
+<html>
+ <head>
+ <meta charset="utf-8">
+ <title></title>
+ <style>
+ table, td, th {
+ border: 1px solid black;
+ }
+ th {
+ padding-top: 5px;
+ padding-bottom: 5px;
+ }
+ td {
+ padding-top: 2.5px;
+ padding-bottom: 2.5px;
+ }
+ th, td {
+ padding-left: 10px;
+ padding-right: 10px;
+ }
+ </style>
+ </head>
+ <body>
+ <h1 id="arfnet2-deployment">ARFNET2 deployment</h1>
+ <p>After the disastrous ISP <a
+ href="http://arf20.com/explanation.txt">schism</a></p>
+ <h2 id="masterplan">Masterplan</h2>
+ <p>Stage 1: very safe - Close all ports - Nuke (or stop) all old VMs
+ (exclude OPNSense) - Make DMZ - Make new basic VMs (cloning deb12
+ template) - Open basic ports</p>
+ <p>Stage 2: new services - IONOS VPS for mail - Some new very safe
+ services - HE IPv6 tunnel - Own authoritative nameservers for domain
+ zone</p>
+ <p>Stage 3*: finally - Another VPS in unknown provider for - Tor -
+ Reverse-proxying the media library - PHP on main site with more web
+ services from scratch, hopefully secure - More new services</p>
+ <h2 id="domain">Domain</h2>
+ <p>arf20.com</p>
+ <p>Registrar: namecheap</p>
+ <h3 id="name-sever-glue-records-at-registrar">Name sever glue records
+ at registrar</h3>
+ <table>
+ <thead>
+ <tr class="header">
+ <th>Nameserver</th>
+ <th>Name</th>
+ <th>IP</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>NS1</td>
+ <td>ns1.arf20.com</td>
+ <td>2.59.235.35 <br> 2001:470:1f21:125::13</td>
+ </tr>
+ <tr class="even">
+ <td>NS2</td>
+ <td>ns2.arf20.com</td>
+ <td>5.250.186.185 <br> 2001:ba0:210:d600::1</td>
+ </tr>
+ </tbody>
+ </table>
+ <h2 id="networking">Networking</h2>
+ <h3 id="hardware">Hardware</h3>
+ <pre><code> WAP
+ |
+ +-----+ +--------------------------+ +----------------+
+ISP ===| ONT |---| DELL switch |-----| TP-Link switch |
+ +-----+ +--------------------------+ +----------------+
+ | | | |
+ | | | |
+ +---------------+ Rest of devices Living room devices
+ | eno1 eno2 |
+ | server router |
+ +---------------+
+
+- 1000BASE-T
+= GPON fiber</code></pre>
+ <h4 id="dell-powerconnect-5424-switch">DELL PowerConnect 5424
+ switch</h4>
+ <p>Port assignents</p>
+ <table>
+ <thead>
+ <tr class="header">
+ <th>port</th>
+ <th>endpoint</th>
+ <th>options</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>g2</td>
+ <td>ONT</td>
+ <td>VLAN access 2</td>
+ </tr>
+ <tr class="even">
+ <td>g4</td>
+ <td>server eno2 WAN</td>
+ <td>VLAN access 2</td>
+ </tr>
+ <tr class="odd">
+ <td>g6</td>
+ <td>test2</td>
+ <td>VLAN access 2</td>
+ </tr>
+ <tr class="even">
+ <td>g3</td>
+ <td>WAP</td>
+ <td>VLAN access 5</td>
+ </tr>
+ <tr class="odd">
+ <td>g5</td>
+ <td>PC</td>
+ <td>VLAN access 4</td>
+ </tr>
+ <tr class="even">
+ <td>g7</td>
+ <td>Living R.</td>
+ <td>VLAN access 5</td>
+ </tr>
+ <tr class="odd">
+ <td>g9</td>
+ <td>server eno1 DMZ+LAN</td>
+ <td>VLAN trunk 4, 5</td>
+ </tr>
+ <tr class="even">
+ <td>g15</td>
+ <td>test4</td>
+ <td>VLAN access 4</td>
+ </tr>
+ <tr class="odd">
+ <td>g17</td>
+ <td>test1</td>
+ <td>VLAN access 1</td>
+ </tr>
+ <tr class="even">
+ <td>g19</td>
+ <td>test5</td>
+ <td>VLAN access 5</td>
+ </tr>
+ <tr class="odd">
+ <td>g21</td>
+ <td>iDRAC</td>
+ <td>VLAN access 4</td>
+ </tr>
+ <tr class="even">
+ <td>g23</td>
+ <td>printer</td>
+ <td>VLAN access 4</td>
+ </tr>
+ </tbody>
+ </table>
+ <p>Management</p>
+ <ul>
+ <li>interface vlan 4: 192.168.4.2/24 gw 192.168.4.1</li>
+ </ul>
+ <h3 id="public-ips">Public IPs</h3>
+ <ul>
+ <li>AVANZA_STATIC: 2.59.235.35</li>
+ <li>AVANZA_CGNAT: dynamic</li>
+ <li>HE v6 tunnel: 2001:470:1f20:125::2</li>
+ <li>IONOS VPS: 5.250.186.185 2001:ba0:210:d600::1</li>
+ </ul>
+ <h3 id="gateways">Gateways</h3>
+ <ul>
+ <li>AVANZA
+ <ul>
+ <li>WAN_STATIC: 2.59.235.1</li>
+ <li>WAN_CGNAT: dynamic</li>
+ </ul></li>
+ <li>HE v6: 2001:470:1f20:125::1 via 216.66.87.102</li>
+ </ul>
+ <h3 id="physical-and-logical-networks">Physical and Logical
+ Networks</h3>
+ <table>
+ <thead>
+ <tr class="header">
+ <th>name</th>
+ <th>VLAN</th>
+ <th>net</th>
+ <th>desc</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>WAN</td>
+ <td>2</td>
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>DMZ</td>
+ <td>4</td>
+ <td>192.168.4.0/24 <br> 2001:470:1f21:125::/64</td>
+ <td>Services</td>
+ </tr>
+ <tr class="odd">
+ <td>LAN</td>
+ <td>5</td>
+ <td>192.168.5.0/24</td>
+ <td>Clients</td>
+ </tr>
+ <tr class="even">
+ <td>VPN</td>
+ <td></td>
+ <td>10.5.0.0/24</td>
+ <td>Wireguard clients</td>
+ </tr>
+ </tbody>
+ </table>
+ <h2 id="firewall">Firewall</h2>
+ <h3 id="interface-rules">Interface Rules</h3>
+ <ul>
+ <li>WAN_CGNAT in
+ <ul>
+ <li>deny *</li>
+ </ul></li>
+ <li>WAN_STATIC in
+ <ul>
+ <li>allow from * to {services} –&gt; NAT rules</li>
+ </ul></li>
+ <li>DMZ in
+ <ul>
+ <li>deny from DMZ net to LAN net</li>
+ <li>allow from DMZ net to firewall</li>
+ <li>allow from DMZ net to * gw WAN_STATIC</li>
+ </ul></li>
+ <li>LAN in
+ <ul>
+ <li>allow ICMP from LAN net to firewall</li>
+ <li>allow IP DNS from LAN net to firewall</li>
+ <li>allow from LAN net to DMZ net</li>
+ <li>allow from LAN net to * gw WAN_CGNAT</li>
+ </ul></li>
+ </ul>
+ <h3 id="ipv4-nat-rules">IPv4 NAT Rules</h3>
+ <table>
+ <thead>
+ <tr class="header">
+ <th>Service</th>
+ <th>Customer</th>
+ <th>IPProto</th>
+ <th>Ext Port</th>
+ <th>Host</th>
+ <th>Re Port</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>OpenVPN</td>
+ <td></td>
+ <td>TCP</td>
+ <td>1195</td>
+ <td>router</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>WireGuard</td>
+ <td></td>
+ <td>UDP</td>
+ <td>51820</td>
+ <td>router</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>DNS NS1</td>
+ <td></td>
+ <td>TCP/UDP</td>
+ <td>53</td>
+ <td>misc</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>iperf3</td>
+ <td></td>
+ <td>TCP</td>
+ <td>5201</td>
+ <td>misc</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>NNTP</td>
+ <td></td>
+ <td>TCP</td>
+ <td>119</td>
+ <td>misc</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>Web</td>
+ <td></td>
+ <td>TCP</td>
+ <td>80,443</td>
+ <td>web</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>Git</td>
+ <td></td>
+ <td>TCP</td>
+ <td>9418</td>
+ <td>web</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>bittorrent</td>
+ <td></td>
+ <td>TCP/UDP</td>
+ <td>8999</td>
+ <td>nas</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>rsync</td>
+ <td></td>
+ <td>TCP/UDP</td>
+ <td>873</td>
+ <td>nas</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>IRC</td>
+ <td></td>
+ <td>TCP</td>
+ <td>6667</td>
+ <td>comm</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>IRCS</td>
+ <td></td>
+ <td>TCP</td>
+ <td>6697</td>
+ <td>comm</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>XMPP c2s</td>
+ <td></td>
+ <td>TCP</td>
+ <td>5222</td>
+ <td>comm</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>XMPP s2s</td>
+ <td></td>
+ <td>TCP</td>
+ <td>5269</td>
+ <td>comm</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>TURN STUN</td>
+ <td></td>
+ <td>TCP/UDP</td>
+ <td>3478</td>
+ <td>comm</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>TURN</td>
+ <td></td>
+ <td>TCP/UDP</td>
+ <td>5349</td>
+ <td>comm</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>TURN UDP relay</td>
+ <td></td>
+ <td>TCP/UDP</td>
+ <td>49152-50176</td>
+ <td>comm</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>mc-waterfall-proxy</td>
+ <td></td>
+ <td>TCP</td>
+ <td>25565</td>
+ <td>game</td>
+ <td>25567</td>
+ </tr>
+ <tr class="even">
+ <td></td>
+ <td></td>
+ <td></td>
+ <td></td>
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>exo-ssh</td>
+ <td>exo</td>
+ <td>TCP</td>
+ <td>4041</td>
+ <td>exovps</td>
+ <td>22</td>
+ </tr>
+ <tr class="even">
+ <td>exo-extra</td>
+ <td>exo</td>
+ <td>TCP</td>
+ <td>4040</td>
+ <td>exovps</td>
+ <td>4040</td>
+ </tr>
+ <tr class="odd">
+ <td>yero-ssh</td>
+ <td>yero</td>
+ <td>TCP</td>
+ <td>1511</td>
+ <td>yerovps</td>
+ <td>22</td>
+ </tr>
+ <tr class="even">
+ <td>yero-sql</td>
+ <td>yero</td>
+ <td>TCP</td>
+ <td>1512</td>
+ <td>yerovps</td>
+ <td>3306</td>
+ </tr>
+ <tr class="odd">
+ <td>FiveM SuperioresRP</td>
+ <td>yero</td>
+ <td>TCP</td>
+ <td>30120,40120</td>
+ <td>yerovps</td>
+ <td></td>
+ </tr>
+ </tbody>
+ </table>
+ <h3 id="ipv6-port-rules">IPv6 port rules</h3>
+ <table>
+ <thead>
+ <tr class="header">
+ <th>Service</th>
+ <th>Customer</th>
+ <th>IPProto</th>
+ <th>Host</th>
+ <th>Port</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>DNS NS1</td>
+ <td></td>
+ <td>TCP/UDP</td>
+ <td>misc</td>
+ <td>53</td>
+ </tr>
+ <tr class="even">
+ <td>Web</td>
+ <td></td>
+ <td>TCP</td>
+ <td>web</td>
+ <td>80,443</td>
+ </tr>
+ </tbody>
+ </table>
+ <h2 id="hosts">Hosts</h2>
+ <ul>
+ <li>server - DELL PowerEdge R720 running Proxmox PVE - …</li>
+ <li>mail - IONOS VPS running Debian 12 - 5.250.186.185
+ 2001:ba0:210:d600::1</li>
+ </ul>
+ <h2 id="management">Management</h2>
+ <ul>
+ <li>OPNSense router DMZ.1</li>
+ <li>DELL switch DMZ.2</li>
+ <li>TP-Link WAP LAN.2</li>
+ <li>Proxmox hypervisor DMZ.4</li>
+ <li>DELL server iDRAC DMZ.5</li>
+ <li>HP printer DMZ.7</li>
+ </ul>
+ <h2 id="server-vms-and-services">server VMs and services</h2>
+ <p>server runs Proxmox PVE.</p>
+ <p>All VMs are Debian 12 (templated) with wazuh agent</p>
+ <h3 id="proxmox-dmz.4-hypervisor">proxmox DMZ.4 (hypervisor)</h3>
+ <ul>
+ <li>SSH</li>
+ <li>Proxmox management interface :8006</li>
+ <li>smartmon + node exporter :9100</li>
+ <li>sensor exporter*</li>
+ <li>NUT - Network UPS TOols daemon (and proper UPS)*</li>
+ </ul>
+ <h3 id="router-dmz.1">router DMZ.1</h3>
+ <ul>
+ <li>(routing/firewalling)</li>
+ <li>SSH</li>
+ <li>DHCP</li>
+ <li>unbound DNS</li>
+ <li>OpenVPN</li>
+ <li>WireGuard</li>
+ <li>IPsec*</li>
+ <li>ntopng :3000</li>
+ <li>telegraf - note: editing config via webfig breaks (timeout and
+ unbound config)</li>
+ </ul>
+ <h3 id="nas-dmz.6">nas DMZ.6</h3>
+ <p>RAID attached here (with the grey stuff) (local only)</p>
+ <ul>
+ <li>SSH</li>
+ <li>NFS</li>
+ <li>Samba SMB*</li>
+ <li>MiniDLNA*</li>
+ <li>FTP</li>
+ <li>qBittorrent-nox</li>
+ <li>jellyfin</li>
+ </ul>
+ <h3 id="web-dmz.9">web DMZ.9</h3>
+ <ul>
+ <li>SSH</li>
+ <li>cerbot</li>
+ <li>nginx (status at :8080)</li>
+ <li>fastcgi PHP</li>
+ <li>mariadb SQL</li>
+ <li>nginx-prometheus-exporter :9113</li>
+ <li>prometheus :9090</li>
+ <li>telegraf</li>
+ <li>influxdb :8086</li>
+ <li>grafana :3000
+ <ul>
+ <li>Proxmox</li>
+ <li>nginx</li>
+ <li>iDRAC</li>
+ </ul></li>
+ <li>zabbix*</li>
+ <li>netbox*</li>
+ <li>fcgiwrap</li>
+ <li>git-http-backend - git smart http server CGI</li>
+ <li>gitd - git daemon</li>
+ <li>cgit - web frontend for git</li>
+ <li>phpBB - forum software</li>
+ <li>Jekyll - blog static site generator thing</li>
+ <li>opentracker? - bittorrent tracker*</li>
+ <li>gophernicus - gopher server*</li>
+ </ul>
+ <table>
+ <colgroup>
+ <col style="width: 22%" />
+ <col style="width: 48%" />
+ <col style="width: 29%" />
+ </colgroup>
+ <thead>
+ <tr class="header">
+ <th>vhost</th>
+ <th>webroot/proxy</th>
+ <th>Comment</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>default</td>
+ <td>&lt;return 418 im a teapot&gt;</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>default:8080</td>
+ <td>&lt;return nstub_status&gt;</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>arf20.com</td>
+ <td>/var/www/arf20.com/html/</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>www.arf20.com</td>
+ <td>&lt;301 redirect arf20.com&gt;</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>matrix.arf20.com</td>
+ <td>http://comm.lan:8008/_matrix</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>webmail.arf20.com</td>
+ <td>/var/www/webmail.arf20.com/html/</td>
+ <td>SquirrelMail</td>
+ </tr>
+ <tr class="odd">
+ <td>nextcloud.arf20.com</td>
+ <td>/var/www/nextcloud.arf20.com/html/</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>grafana.arf20.com</td>
+ <td>http://localhost:3000</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>jellyfin.arf20.com</td>
+ <td>http://nas.lan:8096</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>git.arf20.com</td>
+ <td>/srv/git/</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>cgit.arf20.com</td>
+ <td>fastcgi:/usr/lib/cgit/cgit.cgi</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>blog.arf20.com</td>
+ <td>/var/www/blog.arf20.com/_site/</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>forum.arf20.com</td>
+ <td>/var/www/forum.arf20.com/html/</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>deb.arf20.com</td>
+ <td>/d/FTPServer/software/debian/</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>memes.arf20.com</td>
+ <td>/var/www/memes.arf20.com/, /d/FTPserver/{dcimg, dcmemes,
+ explosionsandfire}</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>news.arf20.com</td>
+ <td>Web-News NNTP newsgroups frontend*</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td></td>
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>status.yero.dev</td>
+ <td>http://yerovps.lan:3001</td>
+ <td></td>
+ </tr>
+ </tbody>
+ </table>
+ <h3 id="wazuh-dmz.10">wazuh DMZ.10</h3>
+ <ul>
+ <li>SSH</li>
+ <li>wazuh</li>
+ </ul>
+ <h3 id="game-dmz.11">game DMZ.11</h3>
+ <ul>
+ <li>SSH</li>
+ <li>waterfall (minecraft reverse proxy)
+ <ul>
+ <li>mclobby (auth)</li>
+ <li>mcrubenmc</li>
+ <li>mcgrupo4*</li>
+ <li>minepau*</li>
+ </ul></li>
+ <li>csgo server*</li>
+ </ul>
+ <h3 id="comm-dmz.12">comm DMZ.12</h3>
+ <ul>
+ <li>SSH</li>
+ <li>cerbot</li>
+ <li>unrealircd - IRC</li>
+ <li>synapse - matrix</li>
+ <li>postgresql - DB for synapse</li>
+ <li>pantalaimon - encrypt matterbridge traffic to matrix</li>
+ <li>matterbridge - bridge channels with different protocols</li>
+ <li>prosody - XMPP</li>
+ <li>coturn - TURN server for matrix and xmpp</li>
+ <li>asterisk - VoIP SIP PBX*</li>
+ </ul>
+ <h3 id="misc-deb12-lxc-dmz.13">misc (Deb12 LXC) DMZ.13</h3>
+ <ul>
+ <li>SSH</li>
+ <li>iperf3</li>
+ <li>bind9 - master authoritative nameserver for arf20.com zone NS1
+ <ul>
+ <li>public recursive*</li>
+ </ul></li>
+ <li>OpenLDAP LDAP*</li>
+ <li>INN2 - NNTP USENET server with SDF peering</li>
+ <li>Discord servers
+ <ul>
+ <li>gDebrid (gookie)</li>
+ </ul></li>
+ </ul>
+ <h3 id="pubnix">pubnix?*</h3>
+ <h3 id="mail-arfnet-ionos-vps-5.250.186.185-2001ba0210d6001">mail
+ (ARFNET-IONOS VPS) 5.250.186.185 2001:ba0:210:d600::1</h3>
+ <ul>
+ <li>SSH</li>
+ <li>certbot</li>
+ <li>postfix - MTA smtpd, submission, submissions <a
+ href="https://github.com/ARF20NET/mail-conf">config</a></li>
+ <li>dovecot - imapd</li>
+ <li>opendkim</li>
+ <li>majordomo? - mailing list manager*</li>
+ <li>bind9 - slave authoritative nameserver NS2</li>
+ </ul>
+ <h3 id="proxy-arfnet-hostmenow-vps">proxy (ARFNET-HOSTMENOW VPS)
+ *</h3>
+ <ul>
+ <li>SSH*</li>
+ <li>IPsec client*</li>
+ <li>proxy for ftp.arf20.com somehow*</li>
+ </ul>
+ <hr />
+ <h3 id="yerovps-dmz.192-yero">yerovps DMZ.192 (yero)</h3>
+ <ul>
+ <li>SSH</li>
+ <li>mariadb</li>
+ <li>FiveM SuperioresRP</li>
+ </ul>
+ <h3 id="exovps-dmz.195-exo">exovps DMZ.195 (exo)</h3>
+ <ul>
+ <li>SSH</li>
+ <li>netbox</li>
+ </ul>
+ <p>*TODO</p>
+ <h2 id="internal-name-and-number-assignation-table">Internal Name and
+ Number Assignation Table</h2>
+ <p>DMZ IPv4s and IPv6 ends in the same way</p>
+ <table>
+ <thead>
+ <tr class="header">
+ <th>Addr</th>
+ <th>Name</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>DMZ.1</td>
+ <td>router.lan</td>
+ </tr>
+ <tr class="even">
+ <td>DMZ.2</td>
+ <td>switch.lan</td>
+ </tr>
+ <tr class="odd">
+ <td>DMZ.3</td>
+ <td>wap.lan</td>
+ </tr>
+ <tr class="even">
+ <td>DMZ.4</td>
+ <td>proxmox.lan</td>
+ </tr>
+ <tr class="odd">
+ <td>DMZ.5</td>
+ <td>idrac.lan</td>
+ </tr>
+ <tr class="even">
+ <td>DMZ.6</td>
+ <td>nas.lan</td>
+ </tr>
+ <tr class="odd">
+ <td>DMZ.7</td>
+ <td>printer.lan</td>
+ </tr>
+ <tr class="even">
+ <td>DMZ.8</td>
+ <td>desktop.lan</td>
+ </tr>
+ <tr class="odd">
+ <td>DMZ.9</td>
+ <td>web.lan</td>
+ </tr>
+ <tr class="even">
+ <td>DMZ.10</td>
+ <td>wazuh.lan</td>
+ </tr>
+ <tr class="odd">
+ <td>DMZ.11</td>
+ <td>game.lan</td>
+ </tr>
+ <tr class="even">
+ <td>DMZ.12</td>
+ <td>comm.lan</td>
+ </tr>
+ <tr class="odd">
+ <td>DMZ.13</td>
+ <td>misc.lan</td>
+ </tr>
+ <tr class="even">
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>DMZ.192</td>
+ <td>yerovps</td>
+ </tr>
+ <tr class="even">
+ <td>DMZ.195</td>
+ <td>exovps</td>
+ </tr>
+ </tbody>
+ </table>
+ <h2 id="domain-dns-zone">Domain DNS zone</h2>
+ <table>
+ <thead>
+ <tr class="header">
+ <th>Name</th>
+ <th>Type</th>
+ <th>Content</th>
+ <th>Comment</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>@</td>
+ <td>NS</td>
+ <td>ns1.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>@</td>
+ <td>NS</td>
+ <td>ns2.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td></td>
+ <td></td>
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>ns1</td>
+ <td>A</td>
+ <td>2.59.235.35</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>ns1</td>
+ <td>AAAA</td>
+ <td>2001:470:1f21:125::13</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>ns2</td>
+ <td>A</td>
+ <td>5.250.186.185</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>ns2</td>
+ <td>AAAA</td>
+ <td>2001:ba0:210:d600::1</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td></td>
+ <td></td>
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>arf20.com</td>
+ <td>A</td>
+ <td>2.59.235.35</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>arf20.com</td>
+ <td>AAAA</td>
+ <td>2001:470:1f21:125::9</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td></td>
+ <td></td>
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>mail.arf20.com</td>
+ <td>A</td>
+ <td>5.250.186.185</td>
+ <td>ARFNET-IONOS</td>
+ </tr>
+ <tr class="odd">
+ <td>mail.arf20.com</td>
+ <td>AAAA</td>
+ <td>2001:ba0:210:d600::1</td>
+ <td>ARFNET-IONOS</td>
+ </tr>
+ <tr class="even">
+ <td>web.arf20.com</td>
+ <td>A</td>
+ <td>2.59.235.35</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>web.arf20.com</td>
+ <td>AAAA</td>
+ <td>2001:470:1f21:125::9</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>game.arf20.com</td>
+ <td>A</td>
+ <td>2.59.235.35</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>game.arf20.com</td>
+ <td>AAAA</td>
+ <td>2001:470:1f21:125::11</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>comm.arf20.com</td>
+ <td>A</td>
+ <td>2.59.235.35</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>comm.arf20.com</td>
+ <td>AAAA</td>
+ <td>2001:470:1f21:125::12</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>misc.arf20.com</td>
+ <td>A</td>
+ <td>2.59.235.35</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>misc.arf20.com</td>
+ <td>AAAA</td>
+ <td>2001:470:1f21:125::13</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td></td>
+ <td></td>
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>irc.arf20.com</td>
+ <td>CNAME</td>
+ <td>comm.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>jellyfin.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>matrix.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>nextcloud.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>turn.arf20.com</td>
+ <td>CNAME</td>
+ <td>comm.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>webmail.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>www.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>xmpp.arf20.com</td>
+ <td>CNAME</td>
+ <td>comm.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>xmppconf.arf20.com</td>
+ <td>CNAME</td>
+ <td>comm.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>grafana.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>git.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>cgit.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>blog.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>forum.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>deb.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>zabbix.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>memes.arf20.com</td>
+ <td>CNAME</td>
+ <td>web.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>news.arf20.com</td>
+ <td>CNAME</td>
+ <td>misc.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td></td>
+ <td></td>
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>_acme-challenge.jellyfin</td>
+ <td>CNAME</td>
+ <td>(challenge)</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>_acme-challenge.irc</td>
+ <td>CNAME</td>
+ <td>(challenge)</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>_acme-challenge.matrix</td>
+ <td>CNAME</td>
+ <td>(challenge)</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>_acme-challenge.mail</td>
+ <td>CNAME</td>
+ <td>(challenge)</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>_acme-challenge.xmpp</td>
+ <td>CNAME</td>
+ <td>(challenge)</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td></td>
+ <td></td>
+ <td></td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>arf20.com</td>
+ <td>MX</td>
+ <td>mail.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>selector._domainkey</td>
+ <td>TXT</td>
+ <td>(DKIM)</td>
+ <td>DKIM for selector ‘selector’</td>
+ </tr>
+ <tr class="even">
+ <td>_dmarc</td>
+ <td>TXT</td>
+ <td>(DMARC)</td>
+ <td></td>
+ </tr>
+ <tr class="odd">
+ <td>arf20.com</td>
+ <td>TXT</td>
+ <td>(SPF)</td>
+ <td></td>
+ </tr>
+ </tbody>
+ </table>
+ <h2 id="he-v6-rdns-zone">HE v6 rDNS zone</h2>
+ <table>
+ <thead>
+ <tr class="header">
+ <th>Name</th>
+ <th>Type</th>
+ <th>Content</th>
+ <th>Comment</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>2001:470:1f21:125::13</td>
+ <td>PTR</td>
+ <td>ns1.arf20.com</td>
+ <td></td>
+ </tr>
+ <tr class="even">
+ <td>2001:470:1f21:125::9</td>
+ <td>PTR</td>
+ <td>arf20.com</td>
+ <td></td>
+ </tr>
+ </tbody>
+ </table>
+ <h2 id="ionos-rdns-zone">IONOS rDNS zone</h2>
+ <table>
+ <thead>
+ <tr class="header">
+ <th>Name</th>
+ <th>Type</th>
+ <th>Content</th>
+ <th>Comment</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr class="odd">
+ <td>5.250.186.185</td>
+ <td>PTR</td>
+ <td>mail.arf20.com</td>
+ <td></td>
+ </tr>
+ </tbody>
+ </table>
+ </body>
+</html>
diff --git a/about/arfnet2.pdf b/about/arfnet2.pdf
new file mode 100644
index 0000000..7fc2afd
--- /dev/null
+++ b/about/arfnet2.pdf
Binary files differ
diff --git a/about.html b/about/index.html
index 9e88198..608baef 100755
--- a/about.html
+++ b/about/index.html
@@ -14,6 +14,7 @@
</a></header>
<hr>
<h2 class="center">About ARFNET</h2>
+ <h3><a href="/arfnet2.html">ARFNET technical description</a></h3>
<div class="div">
<p>
ARFNET is a non-profit organization (a homelab really) devoted to several causes such as:
@@ -60,72 +61,6 @@
this one doesn't last enough.
</p>
</div>
- <div>
- <h2>Network</h2>
- <img width="50%" src="/images/about-arfnet/network.png">
- </div>
- <div>
- <h2>Number asignation table</h2>
- <table class="text">
- <tr>
- <th>Cat</th>
- <th>IP Address</th>
- <th>Host</th>
- <th>local domain</th>
- </tr>
- <tr><td rowspan="16" class="verticaltext">Static Network Infrastructure</td><td>192.168.1.1</td><td>router</td><td>router.lan</td></tr>
- <tr><td>192.168.4.2</td><td>switch</td><td>switch.lan</td></tr>
- <tr><td>192.168.4.3</td><td>wap</td><td>wap.lan</td></tr>
- <tr><td>192.168.4.4</td><td>proxmox</td><td>proxmox.lan</td></tr>
- <tr><td>192.168.4.5</td><td>server iDRAC</td><td>serveridrac.lan</td></tr>
- <tr><td>192.168.4.6</td><td>server</td><td>server.lan</td></tr>
- <tr><td>192.168.4.7</td><td></td><td></td></tr>
- <tr><td>192.168.4.8</td><td></td><td></td></tr>
- <tr><td>192.168.4.9</td><td></td><td></td></tr>
- <tr><td>192.168.4.10</td><td></td><td></td></tr>
- <tr><td>192.168.4.11</td><td></td><td></td></tr>
- <tr><td>192.168.4.12</td><td></td><td></td></tr>
- <tr><td>192.168.4.13</td><td></td><td></td></tr>
- <tr><td>192.168.4.14</td><td></td><td></td></tr>
- <tr><td>192.168.4.15</td><td></td><td></td></tr>
- <tr><td>192.168.4.16</td><td></td><td></td></tr>
- <tr><td rowspan="4" class="verticaltext">DHCP range</td><td>192.168.4.64</td><td></td><td></td></tr>
- <tr><td>...</td><td></td><td></td></tr>
- <tr><td>...</td><td></td><td></td></tr>
- <tr><td>192.168.4.127</td><td></td><td></td></tr>
- </table>
- </div>
-
- <div>
- <h2>ARFNET Rack</h2>
- <table class="text">
- <tr>
- <th>U</th>
- <th width="150px">Front</th>
- <th width="150px">Back</th>
- <th class="invisibletd"></th>
- </tr>
- <tr><td>12</td> <td rowspan="2">drawer</td> <td>PDU</td> <td rowspan="12" class="invisibletd"><img width="260px" src="/images/about-arfnet/rack.jpg"></td> </tr>
- <tr><td>11</td> <td></td> </tr>
- <tr><td>10</td> <td>patch panel</td> <td></td> </tr>
- <tr><td>9</td> <td>mikrotik</td> <td></td> </tr>
- <tr><td>8</td> <td>48p powerconnect</td> <td></td> </tr>
- <tr><td>7</td> <td>ONT + raspi</td> <td></td> </tr>
- <tr><td>6</td> <td colspan="2" rowspan="2">server</td> </tr>
- <tr><td>5</td> </tr>
- <tr><td>4</td> <td>24p powerconnect</td> <td></td> </tr>
- <tr><td>3</td> <td>24p powerconnect</td> <td></td> </tr>
- <tr><td>2</td> <td rowspan="2">cisco 2951</td> <td></td> </tr>
- <tr><td>1</td> <td>UPS</td> </tr>
- </table>
- </div>
-
- <h2>ARFNET Hosts</h2>
- <div class="row">
- <div>
- <span class="text"><strong>server</strong> (24/7): DELL PowerEdge R720, 2x Xeon E5-2670 v2, 64GB PC3-12800R (DDR3-1600MHz 2Rx4 ECC REG), 2x A400 (120 + 240GB), A2000 250GB, Seagate Ironwolf 4TB, 7x HGST 3TB (18TB). Proxmox.</span><br>
- </div>
- </div>
</body>
</html>
diff --git a/index.html b/index.html
index de8917e..743cce5 100644
--- a/index.html
+++ b/index.html
@@ -24,7 +24,7 @@
Sorry for the inconveniences
<hr>
- <a class="fst" href="/about.html">About ARFNET</a>
+ <a class="fst" href="/about/">About ARFNET</a>
<a class="sec" href="/design.html">Design Philosophy</a>
<a class="sec" href="https://www.youtube.com/watch?v=lbsce1DniQA&list=PLhWQL9gpbCPb8JNtOFo760GUD4ekXiR-9">Youtube</a>
<a class="sec" href="https://cgit.arf20.com/">Git</a>
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-21 19:03:00 +0000