GrapheneOS servers

- -

This is a detailed list of the public GrapheneOS servers.

- -

We use hardened local machines for building and signing rather than servers outside - our physical control, so information on that infrastructure is outside the scope of this - page but may be provided in the future elsewhere.

- - - -

GrapheneOS website

- -

Repository
Issue tracker

- -

Specs:

- -

3x OVH VPS vps2023-le-2
2 core
2 GB memory
40 GB NVMe SSD storage
500 Mbit/s bandwidth

- -

1x BuyVM Slice 1024
1 core
1 GB memory
20 GB NVMe SSD storage
1000 Mbit/s bandwidth

- -

Domains:

- -

grapheneos.org
www.grapheneos.org
grapheneos.app
www.grapheneos.app
grapheneos.ca
www.grapheneos.ca
grapheneos.com
www.grapheneos.com
grapheneos.dev
www.grapheneos.dev
grapheneos.foundation
www.grapheneos.foundation
grapheneos.info
www.grapheneos.info
grapheneos.net
www.grapheneos.net
grapheneos.ovh
www.grapheneos.ovh
grapheneos.page
www.grapheneos.page
vanadium.app
www.vanadium.app

- -

IPs:

- -

51.222.156.101 (0.grapheneos.org) — OVH bhs6
2607:5300:205:200::29c6 (0.grapheneos.org) — OVH bhs6
209.141.35.164 (1.grapheneos.org) — BuyVM Las Vegas
2605:6400:20:1131:8088:e08:84e6:632 (1.grapheneos.org) — BuyVM Las Vegas
54.37.41.189 (2.grapheneos.org) — OVH gra8
2001:41d0:304:200::b109 (2.grapheneos.org) — OVH gra8
51.79.160.50 (3.grapheneos.org) — OVH sgp2
2402:1f00:8000:800::16d6 (3.grapheneos.org) — OVH sgp2

- -

Ports:

- -

TCP 22 ssh
TCP 80 http
TCP 443 https

- -

Staging GrapheneOS website

- -

Repository
Issue tracker

- -

Specs:

- -

BuyVM Slice 1024
1 core
1 GB memory
20 GB NVMe SSD storage
1000 Mbit/s bandwidth

- -

Domains:

- -

staging.grapheneos.org

- -

IPs:

- -

199.195.250.78 — BuyVM New York
2605:6400:10:9d6:6d84:e183:acda:16d7 — BuyVM New York

- -

Ports:

- -

TCP 22 ssh
TCP 80 http
TCP 443 https

- -

GrapheneOS release servers

- -

These are the static file servers for GrapheneOS releases and our app - repository. These are used by the releases page and web installer along with the - System Updater and App Store (app repository client) within the OS.

- -

Repository
Issue tracker

- -

Specs:

- -

Macarne dedicated server (sponsored by Macarne)
Ryzen 9950X
128 GB DDR5
2x 2 TB NVMe SSD storage
25000 Mbit/s bandwidth

- -

2x ReliableSite dedicated server (sponsored by ReliableSite)
Ryzen 9900X
192 GB DDR5
2x 4 TB NVMe SSD storage
10000 Mbit/s bandwidth

- -

Domains:

- -

releases.grapheneos.org
seamlessupdate.app
www.seamlessupdate.app
apps.grapheneos.org

- -

IPs:

- -

45.90.185.33 (4.releases.grapheneos.org) — Macarne Amsterdam
2a14:3f87:6920:250::100 (4.releases.grapheneos.org) — Macarne Amsterdam
172.96.172.37 (5.releases.grapheneos.org) — ReliableSite Miami
2605:9880:400:1100:15:1240:515:6e (5.releases.grapheneos.org) — ReliableSite Miami
104.194.8.203 (6.releases.grapheneos.org) — ReliableSite Los Angeles
2605:9880:200:20::113 (6.releases.grapheneos.org) — ReliableSite Los Angeles

- -

Ports:

- -

TCP 22 ssh
TCP 80 http
TCP 443 https

- -

GrapheneOS network servers

- -

These are the default servers used by GrapheneOS for connectivity checks, - secure network time, attestation key provisioning and Predicted Satellite Data - Service (PSDS). These either serve empty responses or provide reverse proxies to - other services.

- -

Repository
Issue tracker

- -

Specs:

- -

3x OVH VPS vps2023-le-2
2 core
2 GB memory
40 GB NVMe SSD storage
500 Mbit/s bandwidth

- -

1x BuyVM Slice 1024
1 core
1 GB memory
20 GB NVMe SSD storage
1000 Mbit/s bandwidth

- -

Domains:

- -

grapheneos.network - HTTP/HTTPS connectivity checks
connectivitycheck.grapheneos.network - HTTP/HTTPS connectivity checks
www.grapheneos.network
grapheneos.online - HTTP/HTTPS connectivity checks
connectivitycheck.grapheneos.online - HTTP/HTTPS connectivity checks
www.grapheneos.online
broadcom.psds.grapheneos.org - HTTPS Broadcom PSDS data cache
samsung.psds.grapheneos.org - HTTPS Samsung PSDS data cache
qualcomm.psds.grapheneos.org - HTTPS Qualcomm PSDS data cache
remoteprovisioning.grapheneos.org - HTTPS reverse proxy to remoteprovisioning.google.com
widevineprovisioning.grapheneos.org - HTTPS reverse proxy for Widevine provisioning
time.grapheneos.org - HTTPS time server with millisecond precision X-Time header
supl.grapheneos.org - TLS reverse proxy to supl.google.com
nominatim.grapheneos.org - HTTPS reverse proxy to nominatim.openstreetmap.org, which will become our own instance of Nominatim instead of a proxy
gs-loc.apple.grapheneos.org - HTTPS reverse proxy to Apple's network location service, which will remain an option after we have our own location service
update.vanadium.app - HTTPS reverse proxy to update.googleapis.com for Chromium component updates (will be hosted directly in the future)
dl.vanadium.app - HTTPS reverse proxy to CDNs for Chromium component updates (will be hosted directly in the future)

- -

IPs:

- -

51.222.159.116 (0.grapheneos.network) — OVH bhs6
2607:5300:205:200::2584 (0.grapheneos.network) — OVH bhs6
209.141.37.35 (1.grapheneos.network) — BuyVM Las Vegas
2605:6400:20:387:72d4:dab9:a369:f351 (1.grapheneos.network) — BuyVM Las Vegas
54.37.41.188 (2.grapheneos.network) — OVH gra8
2001:41d0:304:200::902f (2.grapheneos.network) — OVH gra8
51.79.161.36 (3.grapheneos.network) — OVH sgp2
2402:1f00:8000:800::1949 (3.grapheneos.network) — OVH sgp2

- -

Ports:

- -

TCP 22 ssh
TCP 80 http
UDP 123 ntp
TCP 443 https
TCP 7275 supl

- -

GrapheneOS mail server

- -

Repository
Issue tracker

- -

Specs:

- -

OVH VPS vps2023-le-2
2 core
2 GB memory
40 GB NVMe SSD storage
500 Mbit/s bandwidth

- -

Domains:

- -

mail.grapheneos.net
mail.grapheneos.org
mta-sts.attestation.app
mta-sts.discuss.grapheneos.org
mta-sts.grapheneos.app
mta-sts.grapheneos.ca
mta-sts.grapheneos.com
mta-sts.grapheneos.dev
mta-sts.grapheneos.foundation
mta-sts.grapheneos.info
mta-sts.grapheneos.net
mta-sts.grapheneos.network
mta-sts.grapheneos.online
mta-sts.grapheneos.org
mta-sts.grapheneos.ovh
mta-sts.grapheneos.page
mta-sts.grapheneos.social
mta-sts.mail.grapheneos.org
mta-sts.matrix.grapheneos.org
mta-sts.seamlessupdate.app
mta-sts.vanadium.app

- -

IPs:

- -

192.99.98.22 — OVH bhs6
2607:5300:205:200::472f — OVH bhs6

- -

Ports:

- -

TCP 22 ssh
TCP 25 smtp
TCP 80 http
TCP 443 https
TCP 465 submissions
TCP 993 imaps

- -

GrapheneOS discussion forum server

- -

Repository
Issue tracker

- -

Specs:

- -

OVH VPS vps2023-le-4
4 core
4 GB memory
80 GB NVMe SSD storage
1000 Mbit/s bandwidth

- -

Domains:

- -

discuss.grapheneos.org

- -

IPs:

- -

51.222.14.6 — OVH bhs6
2607:5300:205:200::29e8 — OVH bhs6

- -

Ports:

- -

TCP 22 ssh
TCP 80 http
TCP 443 https

- - - -

GrapheneOS Matrix server

- -

This server primarily runs the synapse Matrix server with PostgreSQL behind an - nginx web server. It also runs the mjolnir bot for moderation and matterbridge is - used to implement a bridge between Matrix, IRC and Telegram.

- -

Repository
Issue tracker

- -

Specs:

- -

OVH VPS vps2020-comfort-4-8-160
4 core
8 GB memory
160 GB NVMe SSD storage
1000 Mbit/s bandwidth

- -

Domains:

- -

matrix.grapheneos.org
element.grapheneos.org

- -

IPs:

- -

51.79.51.42 — OVH bhs6
2607:5300:205:200::26e1 — OVH bhs6

- -

Ports:

- -

TCP 22 ssh
TCP 80 http
TCP 443 https

- -

GrapheneOS DNS servers

- -

Repository
Issue tracker

- -

Specs:

- -

4x OVH VPS vps2023-le-2
2 core
2 GB memory
40 GB NVMe SSD storage
500 Mbit/s bandwidth

- -

3x BuyVM Slice 1024
1 core
1 GB memory
20 GB NVMe SSD storage
1000 Mbit/s bandwidth

- -

Domains:

- -

ns1.attestation.app
ns1.grapheneos.app
ns1.grapheneos.ca
ns1.grapheneos.com
ns1.grapheneos.dev
ns1.grapheneos.foundation
ns1.grapheneos.info
ns1.grapheneos.net
ns1.grapheneos.network
ns1.grapheneos.online
ns1.grapheneos.org
ns1.grapheneos.ovh
ns1.grapheneos.page
ns1.grapheneos.social
ns1.seamlessupdate.app
ns1.vanadium.app
ns2.attestation.app
ns2.grapheneos.app
ns2.grapheneos.ca
ns2.grapheneos.com
ns2.grapheneos.dev
ns2.grapheneos.foundation
ns2.grapheneos.info
ns2.grapheneos.net
ns2.grapheneos.network
ns2.grapheneos.online
ns2.grapheneos.org
ns2.grapheneos.ovh
ns2.grapheneos.page
ns2.grapheneos.social
ns2.seamlessupdate.app
ns2.vanadium.app

- -

IPs:

- -

185.187.152.9 (anycast), 51.161.34.158 (0.ns1.grapheneos.org) — OVH bhs6
2a05:b0c4:1::8 (anycast), 2607:5300:205:200::eaa (0.ns1.grapheneos.org) — OVH bhs6
185.187.152.9 (anycast), 15.204.8.153 (1.ns1.grapheneos.org) — OVH US us-west-or-2
2a05:b0c4:1::8 (anycast), 2604:2dc0:202:300::23a6 (1.ns1.grapheneos.org) — OVH us-west-or-2
185.187.152.9 (anycast) 57.129.65.223 (2.ns1.grapheneos.org) — OVH de2
2a05:b0c4:1::8 (anycast) 2001:41d0:701:1100::245b (2.ns1.grapheneos.org) — OVH de2
185.187.152.9 (anycast) 15.235.197.61 (3.ns1.grapheneos.org) — OVH sgp2
2a05:b0c4:1::8 (anycast) 2402:1f00:8000:800::3966 (3.ns1.grapheneos.org) — OVH sgp2
198.251.90.93 (anycast), 198.98.53.141 (0.ns2.grapheneos.org) — BuyVM New York
2605:6400:10:102e:95bc:89ef:2e7f:49bb (0.ns2.grapheneos.org) — BuyVM New York
198.251.90.93 (anycast), 205.185.124.155 (1.ns2.grapheneos.org) — BuyVM Las Vegas
2605:6400:20:1c8f:a0c9:372d:482e:945b (1.ns2.grapheneos.org) — BuyVM Las Vegas
198.251.90.93 (anycast), 107.189.3.168 (2.ns2.grapheneos.org) — BuyVM Luxembourg
2605:6400:30:ec25:102c:af6d:5be:1eb8 (2.ns2.grapheneos.org) — BuyVM Luxembourg

- -

Ports:

- -

TCP 22 ssh
TCP 53 domain
UDP 53 domain
TCP 80 http
TCP 443 https
TCP 853 domain-s

- -

Staging GrapheneOS DNS server

- -

Repository
Issue tracker

- -

Specs:

- -

BuyVM Slice 1024
1 core
1 GB memory
20 GB NVMe SSD storage
1000 Mbit/s bandwidth

- -

Domains:

- -

ns1.staging.attestation.app
ns2.staging.attestation.app
ns1.staging.grapheneos.org
ns2.staging.grapheneos.org

- -

IPs:

- -

198.98.56.238 — BuyVM New York
2605:6400:10:c41:de92:c534:326a:711a — BuyVM New York

- -

Ports:

- -

TCP 22 ssh
TCP 53 domain
UDP 53 domain
TCP 80 http
TCP 443 https
TCP 853 domain-s

- -

Attestation website and service

- -

Repository
Issue tracker

- -

Specs:

- -

OVH VPS vps2023-le-4
4 core
4 GB memory
80 GB NVMe SSD storage
1000 Mbit/s bandwidth

- -

Domains:

- -

attestation.app
www.attestation.app

- -

IPs:

- -

51.79.66.27 — OVH bhs6
2607:5300:205:200::7e9 — OVH bhs6

- -

Ports:

- -

TCP 22 ssh
TCP 80 http
TCP 443 https

- -

Staging attestation website and service

- -

Repository
Issue tracker

- -

Specs:

- -

BuyVM Slice 1024
1 core
1 GB memory
20 GB NVMe SSD storage
1000 Mbit/s bandwidth

- -

Domains:

- -

staging.attestation.app

- -

IPs:

- -

198.98.57.157 — BuyVM New York
2605:6400:10:aa9:1c0f:44d3:da15:c0ec — BuyVM New York

- -

Ports:

- -

TCP 22 ssh
TCP 80 http
TCP 443 https