🪐

SnarfNet | Infrastructure & Topology

ALL CLUSTERS ACTIVE

Complete operational schematic mapping dual-WAN routing, VLAN segmentation, 4 compute clusters (Aerodrome, Spaceport, Spacedock, Shipyard), AI inference fabrics, and storage layers.

⌘K
Topology Release
Phase 8 • Nov 2026

Network VLAN Fabric

8 Zones
VLAN 1 LAN / Core
UDM-SE Gateway, Core Switches
14.44.4.0/25
VLAN 2 Management
APs, USP RPS, iDRAC, Switches
140.44.44.0/24
VLAN 20 Compute Fleet
K3s Aerodrome, Spaceport, Swarm
140.44.4.0/25
VLAN 3 Spacedock Lab
Harvester HCI Virtualization
140.44.1.0/24
VLAN 40 Storage SAN
SnarfNAS (DS416play), SN-NAS (RS810+)
14.10.10.0/25
VLAN 50 Smart Home
Home Assistant, NUT, Tempest
14.4.4.0/25
VLAN 60 HA Interconnect
Keepalived VIPs & Sync Heartbeats
140.4.4.0/25
VLAN 30 Media Clients
Smart TVs, Apple TVs, Streaming
192.168.1.0/25

Topology Key

Core Backbone
K3s Compute
Harvester HCI
Swarm Fleet
Cloudflare / Tunnel
High Availability
Public Internet
Primary WAN: 174.106.252.96
WAN 1: Fiber ONT
1 Gbps Symmetric
10G SFP+ to UDM-SE
WAN 2: 5G Backup
Cellular Standby
GbE RJ45 Failover
🛡️

UniFi Dream Machine Special Edition (UDM-SE)

Gateway VIP: 14.44.4.1 • UniFi OS v4.1 • WireGuard Server
10G SFP+ Backbone
⚡ Routing & QoS
  • • Inter-VLAN Wire-Speed L3
  • • Smart Queues & FQ-CoDel
  • • VLAN 20 Compute Priority
🔒 Edge Security
  • • Suricata IPS/IDS Level 5
  • • Deep Packet Inspection
  • • Strict LAN/IoT Isolation
🎯 Core Port Forwards
  • • 80/443 → 140.44.4.74 (NPM Host)
  • • 10051/52 → 140.44.4.51 (Zabbix)
  • • 8443/27015 → 14.4.4.15 (PC)
🔀
USW Enterprise Core Switches
2.5G PoE+ to APs, 10G SFP+ to Racks
📶
UniFi Wi-Fi 6 Enterprise Fleet
SSIDs: SnarfNet-IoT, SnarfNet-5G, Trusted

Edge Access & Ingress

Cloudflare Zero Trust cloudflared

Outbound-only secure tunnel routes *.snarfnet.net without opening inbound WAN router ports.

Tailscale Mesh VPN 100.64.0.0/10

Subnet routers provide direct wireguard access to all 8 VLANs from mobile devices.

Authentik Conditional MFA SSO & Auth

Client IP evaluation: Internal VLANs bypass MFA for frictionless use; external WAN enforces Passkeys/MFA.

🧠 AI Inference Pipeline

Tesla T4s + Hailo
1. Frontend Open WebUI (:8080)
↓
2. Reasoning vLLM DeepSeek-R1
↓
3. Execution Triton + Qdrant

Compute Clusters & Workload Fleet

All compute clusters operate on VLAN 20 (140.44.4.0/25) with dedicated VIPs and Longhorn block fabrics.

29 Physical Nodes 400+ Containers

Cluster A: Aerodrome

Rancher Local
10 Nodes • 3 Control Plane + 7 Workers • Debian 12 (arm64) • MetalLB: 140.44.4.28-39
40 CPU Cores
65.5 GiB RAM Total
ctl01-03: 140.44.4.11-13
wrk01-04: 140.44.4.21-24
wrk05-07: 140.44.4.25-27
Storage Type: Longhorn
Storage Total: 818 GiB
Active Workloads & VIPs
🐄 Rancher Management
aerodrome.snarfnet.net
:443
🔑 Authentik SSO Portal
authentik.snarfnet.net
VIP .29
📊 Grafana Telemetry
grafana.snarfnet.net
VIP .32
📈 Prometheus TSDB
39 Targets (cAdvisor + Nodes)
:9090
🟢 Uptime Kuma Probes
uptime.snarfnet.net (35 Mon.)
VIP .28
🦅 AWX Ansible Controller
awx.snarfnet.net
VIP .30

Cluster B: Spaceport

GitOps Core
10 Nodes • 4 Control Plane + 6 Workers • RPi 5 (arm64) • MetalLB: 140.44.4.57-65
40 CPU Cores
54.0 GiB RAM Total
ctl01-04: 140.44.4.41-44
wrk01-03: 140.44.4.51-53
wrk04-06: 140.44.4.54-56
Storage Type: Longhorn
Storage Total: 1.14 TiB
Active Workloads & VIPs
🐙 ArgoCD Reconciler
argo.snarfnet.net (15 Apps)
Node .51
🍵 Gitea Repositories
git.snarfnet.net
VIP .62
🏠 Homepage Dashboard
homepage.snarfnet.net
VIP .60
🛡️ Zabbix Core Server
zabbix.snarfnet.net (28 Hosts)
VIP .61
⚙️ Semaphore Ansible
semaphore.snarfnet.net
VIP .58
👨‍💻 Coder Dev Cloud
coder.snarfnet.net
VIP .63

Cluster C: Spacedock (Harvester HCI)

GPU Inference
4 Physical Nodes • AMD64 Server Architecture • Dedicated Tesla T4 AI Compute
224 CPU Cores
503 GiB RAM Total • 4x Tesla T4 GPUs
Node 01: 140.44.4.81
Node 02: 140.44.4.82
Node 03: 140.44.4.83
Node 04: 140.44.4.84
Active Workloads & Inference Services
🌾 Harvester HCI Console
harvester.spacedock.snarfnet.net
VLAN 3
🧠 vLLM DeepSeek-R1-14B
Reasoning Planner (.81)
:30805
💎 vLLM Gemma-4-12B
Coding Specialist (.82)
:30804
🤖 vLLM Qwen 2.5-7B
Instruction Following (.84)
:30800
🔱 Triton Inference Server
Decision Engine (.83)
:30803
⚡ Qdrant Vector Engine
Semantic Vector Store (.82)
:30633

Cluster D: Shipyard (Docker Swarm)

Swarm VIP: 140.44.4.70
5 RPi 5 Nodes • Keepalived VRRP VIP • Host-Mode Ingress • Portainer EE 2.45
20 CPU Cores
20.0 GiB RAM Total
Swm01: .71
Swm02: .72
Swm03: .73
NPM: .74
Swm05: .75
Active Workloads & Stacks
🚢 Portainer Enterprise
shipyard.snarfnet.net
:9443
🌐 NGINX Proxy Manager
Host Mode Ingress (.74)
:80/:443
🔔 Gotify Notifications
gotify.snarfnet.net
:8090
🧭 Heimdall Landing
portal.snarfnet.net
:85
💻 MeshCentral Remote
mesh.snarfnet.net
:8086
📦 Homebox Inventory
homebox.snarfnet.net
:3100
💾

Storage SAN & Distributed Volumes (VLAN 40)

14.10.10.0/25
SnarfNAS (Synology DS416play) 14.10.10.72

Synology DiskStation DS416play desktop appliance, primary NFS/SMB target, media libraries, Time Machine, and Hyper Backup replication.

Drives: 4 Drives
Total Storage: 16 TiB Total
SN-NAS (Synology RS810+) 14.10.10.71

Synology RackStation RS810+ 1U rackmount appliance, dedicated Btrfs backup pool, iSCSI targets, and Snapshot Replication.

Drives: 4 Drives
Total Storage: 37 TiB Total
Longhorn Spaceport Storage 140.44.4.41-56

Replicated distributed block storage across Spaceport workers backing Gitea, Semaphore, Jenkins, and Technitium DNS.

Drives: 10 Disks
Total Storage: 1.14 TiB Total
Longhorn Aerodrome Storage 140.44.4.11-27

Replicated low-latency distributed block storage backing Prometheus, Grafana, Authentik, AWX, and databases.

Drives: 7 Disks
Total Storage: 818 GiB Total
Harvester HCI Distributed Storage (Spacedock Cluster) 140.44.1.0/24 (VLAN 3)

Multi-node hypervisor storage fabric across 4 physical Harvester nodes backing VM virtual disks, container rootfs, and AI model inference storage.

Drives: 35 Disks (across 4 nodes)
Total Storage: 46.41 TiB Total (46.22 TiB avail)
🏡

Smart Home & Edge AI Fabric (VLAN 50)

14.4.4.0/25
Home Assistant Yellow 14.4.4.20:8123

Primary smart home automation hub, Zigbee/Z-Wave networks, Matter, local voice processing.

Tempest Weather Station Direct HA Telemetry

Local UDP & cloud backyard weather station (Temp, Feels Like, Humidity, Wind Speed rounded to 0.1°).

NUT Master Daemon 14.4.4.44:3493

Network UPS Tools master daemon monitoring central battery units, broadcast shutdown signals.

Hailo-8 Edge NPU Node 140.44.4.7:8000

Dedicated Raspberry Pi 5 with 26 TOPS Hailo-8 AI acceleration running lightweight local LLMs.