Network Overview¶

Architecture¶

The scandora.net network connects two physical sites (Owl in Iowa, Blue in Colorado) with cloud instances via a ZeroTier overlay network.

graph TB
    subgraph "Physical Sites"
        subgraph "Owl - Iowa"
            OWL_GW[OPNsense Gateway<br/>DEC700<br/>10.7.0.1]
            OWL_LAN[LAN: 10.7.0.0/16]
            OWL_WAN[WAN: Metronet<br/>Static IP]
            OWL_WAN --> OWL_GW
            OWL_GW --> OWL_LAN
        end

        subgraph "Blue - Colorado"
            BLUE_GW[OPNsense Gateway<br/>Protectli UP-2420<br/>10.15.0.1]
            BLUE_LAN[LAN: 10.15.0.0/16]
            BLUE_WAN[WAN: Starlink<br/>DHCP]
            BLUE_WAN --> BLUE_GW
            BLUE_GW --> BLUE_LAN
        end
    end

    subgraph "Cloud Infrastructure"
        subgraph "AWS us-west-2"
            PLUTO[pluto<br/>t3.micro<br/>10.0.0.10]
            MICKEY[mickey<br/>t3a.medium<br/>10.0.0.20]
        end

        subgraph "GCE"
            DUMBO[dumbo<br/>e2-medium<br/>10.1.0.110]
            BOGART[bogart<br/>e2-micro<br/>10.10.10.10]
        end
    end

    ZT{{"ZeroTier Overlay<br/>192.168.194.0/24<br/>Network: 6ab565387a4b9177"}}

    OWL_GW <--> ZT
    BLUE_GW <--> ZT
    PLUTO <--> ZT
    MICKEY <--> ZT
    DUMBO <--> ZT
    BOGART <--> ZT

    BOGART -.-> |PowerDNS| OWL_GW
    BOGART -.-> |PowerDNS| BLUE_GW

Site Details¶

Owl (Iowa)¶

Attribute	Value
Hardware	DEC700
ISP	Metronet
WAN IP	Static (46.110.77.34)
IPv6	Hurricane Electric tunnel
LAN Subnet	10.7.0.0/16
Gateway IP	10.7.0.1
ZeroTier IP	192.168.194.10

Blue (Colorado)¶

Attribute	Value
Hardware	Protectli UP-2420
ISP	Starlink
WAN IP	Dynamic (DHCP)
IPv6	DHCPv6-PD (/56 prefix)
LAN Subnet	10.15.0.0/16
Gateway IP	10.15.0.1
ZeroTier IP	192.168.194.x

Connectivity¶

Site-to-Site¶

All site-to-site connectivity flows through ZeroTier:

Owl ↔ Blue: Via ZeroTier overlay (192.168.194.0/24)
Owl ↔ Cloud: Via ZeroTier
Blue ↔ Cloud: Via ZeroTier

Internet Access¶

Site	IPv4	IPv6
Owl	Static IP (Metronet)	HE Tunnel (static prefix)
Blue	Dynamic DHCP (Starlink)	DHCPv6-PD (dynamic prefix)

DNS Resolution¶

Internal DNS uses split-horizon:

External queries → Cloudflare → Public IPs
Internal queries → Gateway Unbound → PowerDNS (Bogart) → Private IPs

See DNS Architecture for details.

IP Address Allocation¶

Network	CIDR	Purpose
10.7.0.0/16	Owl LAN	Iowa site
10.15.0.0/16	Blue LAN	Colorado site
10.0.0.0/16	AWS	Cloud instances
10.1.0.0/16	GCE (dumbo)	General workloads
10.10.0.0/16	GCE (bogart)	PowerDNS server
10.2.0.0/16	Meanservers	Rocky (bare metal)
192.168.194.0/24	ZeroTier	Overlay network

See IP Allocation for detailed assignments.

Key Services¶

Service	Host	Port	Purpose
PowerDNS	bogart (10.10.10.10)	53, 8081	Internal DNS
ZeroTier	All hosts	9993/UDP	Overlay network
SSH	All hosts	22	Remote access
DHCP	Gateways	67-68	LAN IP assignment