KYAU Network
Back to Main Page
Arch Linux x64_86| SyS: E5v2-SAT-1-16 |
|---|
 Supermicro X9SRi-3F ATX Server Board |
 Intel C606 |
 Intel Xeon E5-1620 v2; Ivy Bridge EP (3.7GHz, 10M Cache) |
 Samsung 16GB DDR3 1866 ECC/REG CL13 |
 Matrox G200eW 16MB DDR2 Graphics |
 Hitachi Ultrastar 7K4000 2TB 6.0Gb/s (7200RPM, 64MB) |
| Hitachi Ultrastar 7K4000 2TB 6.0Gb/s (7200RPM, 64MB) |
 Intel i350 Dual Port 1Gb/s |
 250Mb/s (unmetered) |
Arch Linux x64_86| OVH: KS-8G |
|---|
| Intel Desktop Board DH61AG Thin Mini-ITX |
| Intel H61 Express |
| Intel Core i3-2130; Sandy Bridge (3.5GHz) |
| Kingston 8GB DDR3 1333 |
| Intel HD 3000 Graphics |
| Toshiba 2TB 6.0Gb/s (7200RPM, 64MB Buffer) |
| 100Mb/s (2TB limit, then 10Mb/s) |
KYAU Network is powered by Arch Linux and OVH. The machine, as seen on the right, is from their essential dedicated server line and is located in their Beauharnois, CA facility, more specifically in datacenter BHS6. We are utilizing Kernel-based Virtual Machines (KVM) to separate our services onto separate virtual machines (VMs). All VM images are built in-house using Packer and then tested extensively with Vagrant. The service VMs themselves are run using Libvirt with the disk volumes sitting on LVM thin volumes on-top of RAID10(far2).
Security & Reliability
Security & ReliabilityOur network has been setup with security and reliability as our two primary focus points. Our DNS server has been setup to achieve an A+ with 100% in all four categories on DNS Spy. Our web server, running nginx with Let's Encrypt SSL certificates, has been setup to achieve an A+ rating with 100 points in every category on SSL Labs.
 | We are currently looking for a low-end, multiple IPv4, VPS provider on a separate network/continent for our slave DNS server |
Why Arch Linux?
Arch Linux was an in-house decision we did not take lightly, in 2013 we switched from FreeBSD to Arch Linux and have not looked back. Running Arch Linux on a server in a production environment is very feasible, provided you know a bit about security and keep on top of advisories. That being said we do not live in a perfect world, and our server logs are proof of that.
History
Network
The following is the complete network setup for everything that the KYAU Network is currently running.
| Machine/VM | OS | Hostname | vMAC | Location* | IPv4 | IPv6 |
|---|---|---|---|---|---|---|
| E5v2-SAT-1-16 | Arch Linux | neutron.kyau.net | ∞ | CA | 158.69.253.213/32 | 2607:5300:120:dd5::/32 |
| bind | Arch Linux | dwarf.kyau.net | 02:00:00:72:47:2b | US CA |
142.44.172.223/32 142.44.169.173/32 |
2607:5300:120:dd5::1/32 |
| sql | Arch Linux | nova.kyau.net | 02:00:00:4d:3b:3b | US | 142.44.152.32/32 | 2607:5300:120:dd5::2/32 |
| nginx | Arch Linux | pulsar.kyau.net | 02:00:00:bc:c2:b7 | US | 142.44.172.255/32 | 2607:5300:120:dd5::3/32 |
| shell | OpenBSD | proto.kyau.net | ?? | CA | 167.114.151.176/29 | 2607:5300:120:dd5::5/32 |
| devel | Arch Linux | dev.kyau.net | ?? | ?? | ?? | ?? |
| VPS-SSD1 | Arch Linux | chaos.kyau.net | ∞ | CA | 158.69.196.14/32 | 2607:5300:201:3100::2dac/32 |
Shell Box
The shell box is our on-going experiment/education in security. It is powered by OpenBSD and is open to anyone, provided they are willing to go through the application process. More details should be available soon.
 | WARNING: The Shell Box is still currently in development and as such, is not available yet! |
"One of the things I have always wanted to do since I was a younger was to run a shell provider. Shy of some dabbling with Slackware, which I installed from a CDROM I got in the back of a book at the local library (pre-internet joys), this was my first major introduction to Linux and the command line. I spent a good majority of my youth on IRC messing around with "shells". I even got my first major introduction to programming (aside from BASIC and HTML) when I started coding botnet scripts for eggdrop in TCL." ~Kyau
| VHost | IPv4 | IPv6 | Source |
|---|---|---|---|
| raptr.kyaulabs.com | 167.114.151.176/32 | 2607:5300:120:dd5::5/32 | ∞ |
| ?? | 167.114.151.177/32 | 2607:5300:120:dd5::6/32 | ∞ |
| quantum.protoco.de | 167.114.151.178/32 | 2607:5300:120:dd5::7/32 | ∞ |
| ansi.bbs.io | 167.114.151.179/32 | 2607:5300:120:dd5::8/32 | ∞ |
| openbsd.efnet.de | 167.114.151.180/32 | 2607:5300:120:dd5::9/32 | ∞ |
| ?? | 167.114.151.181/32 | 2607:5300:120:dd5::a/32 | ∞ |
| ?? | 167.114.151.182/32 | 2607:5300:120:dd5::b/32 | ∞ |
| ?? | 167.114.151.183/32 | 2607:5300:120:dd5::c/32 | ∞ |
