🪐

SnarfNet | Infrastructure & Topology

ALL CLUSTERS ACTIVE

Complete operational schematic mapping dual-WAN routing, VLAN segmentation, 4 compute clusters (Aerodrome, Spaceport, Spacedock, Shipyard), AI inference fabrics, and storage layers.

⌘K
Topology Release
Phase 8 • Nov 2026

Network VLAN Fabric

8 Zones
VLAN 1 LAN / Core
UDM-SE Gateway, Core Switches
14.44.4.0/25
VLAN 2 Management
APs, USP RPS, iDRAC, Switches
140.44.44.0/24
VLAN 20 Compute Fleet
K3s Aerodrome, Spaceport, Swarm
140.44.4.0/25
VLAN 3 Spacedock Lab
Harvester HCI Virtualization
140.44.1.0/24
VLAN 40 Storage SAN
SnarfNAS, SN-NAS TrueNAS
14.10.10.0/25
VLAN 50 Smart Home
Home Assistant, NUT, Tempest
14.4.4.0/25
VLAN 60 HA Interconnect
Keepalived VIPs & Sync Heartbeats
140.4.4.0/25
VLAN 30 Media Clients
Smart TVs, Apple TVs, Streaming
192.168.1.0/25

Topology Key

Core Backbone
K3s Compute
Harvester HCI
Swarm Fleet
Cloudflare / Tunnel
High Availability
Public Internet
Primary WAN: 174.106.252.96
WAN 1: Fiber ONT
1 Gbps Symmetric
10G SFP+ to UDM-SE
WAN 2: 5G Backup
Cellular Standby
GbE RJ45 Failover
🛡️

UniFi Dream Machine Special Edition (UDM-SE)

Gateway VIP: 14.44.4.1 • UniFi OS v4.1 • WireGuard Server
10G SFP+ Backbone
⚡ Routing & QoS
  • • Inter-VLAN Wire-Speed L3
  • • Smart Queues & FQ-CoDel
  • • VLAN 20 Compute Priority
🔒 Edge Security
  • • Suricata IPS/IDS Level 5
  • • Deep Packet Inspection
  • • Strict LAN/IoT Isolation
🎯 Core Port Forwards
  • • 80/443 → 140.44.4.74 (NPM Host)
  • • 10051/52 → 140.44.4.51 (Zabbix)
  • • 8443/27015 → 14.4.4.15 (PC)
🔀
USW Enterprise Core Switches
2.5G PoE+ to APs, 10G SFP+ to Racks
📶
UniFi Wi-Fi 6 Enterprise Fleet
SSIDs: SnarfNet-IoT, SnarfNet-5G, Trusted

Edge Access & Ingress

Cloudflare Zero Trust cloudflared

Outbound-only secure tunnel routes *.snarfnet.net without opening inbound WAN router ports.

Tailscale Mesh VPN 100.64.0.0/10

Subnet routers provide direct wireguard access to all 8 VLANs from mobile devices.

Authentik Conditional MFA SSO & Auth

Client IP evaluation: Internal VLANs bypass MFA for frictionless use; external WAN enforces Passkeys/MFA.

🧠 AI Inference Pipeline

Tesla T4s + Hailo
1. Frontend Open WebUI (:8080)
↓
2. Reasoning vLLM DeepSeek-R1
↓
3. Execution Triton + Qdrant

Compute Clusters & Workload Fleet

All compute clusters operate on VLAN 20 (140.44.4.0/25) with dedicated VIPs and Longhorn block fabrics.

29 Physical Nodes 400+ Containers

Cluster A: Aerodrome

Rancher Local
10 Nodes • 3 Control Plane + 7 Workers • Debian 12 (arm64) • MetalLB: 140.44.4.28-39
28 CPU Cores
770 Max Pod Capacity
ctl01-03: 140.44.4.11-13
wrk01-04: 140.44.4.21-24
wrk05-07: 140.44.4.25-27
Longhorn: Flash NVMe
Active Workloads & VIPs
🐄 Rancher Management
aerodrome.snarfnet.net
:443
🔑 Authentik SSO Portal
authentik.snarfnet.net
VIP .29
📊 Grafana Telemetry
grafana.snarfnet.net
VIP .32
📈 Prometheus TSDB
39 Targets (cAdvisor + Nodes)
:9090
🟢 Uptime Kuma Probes
uptime.snarfnet.net (35 Mon.)
VIP .28
🦅 AWX Ansible Controller
awx.snarfnet.net
VIP .30

Cluster B: Spaceport

GitOps Core
10 Nodes • 4 Control Plane + 6 Workers • RPi 5 (arm64) • MetalLB: 140.44.4.57-65
40 CPU Cores
52.7 GiB RAM Total
ctl01-04: 140.44.4.41-44
wrk01-03: 140.44.4.51-53
wrk04-06: 140.44.4.54-56
Storage: 1.14 TiB Block
Active Workloads & VIPs
🐙 ArgoCD Reconciler
argo.snarfnet.net (15 Apps)
Node .51
🍵 Gitea Repositories
git.snarfnet.net
VIP .62
🏠 Homepage Dashboard
homepage.snarfnet.net
VIP .60
🛡️ Zabbix Core Server
zabbix.snarfnet.net (28 Hosts)
VIP .61
⚙️ Semaphore Ansible
semaphore.snarfnet.net
VIP .58
👨‍💻 Coder Dev Cloud
coder.snarfnet.net
VIP .63

Cluster C: Spacedock (Harvester HCI)

GPU Inference
4 Physical Nodes • AMD64 Server Architecture • Dedicated Tesla T4 AI Compute
224 CPU Cores
4x Tesla T4 GPUs
Node 01: 140.44.4.81
Node 02: 140.44.4.82
Node 03: 140.44.4.83
Node 04: 140.44.4.84
Active Workloads & Inference Services
🌾 Harvester HCI Console
harvester.spacedock.snarfnet.net
VLAN 3
🧠 vLLM DeepSeek-R1-14B
Reasoning Planner (.81)
:30805
💎 vLLM Gemma-4-12B
Coding Specialist (.82)
:30804
🤖 vLLM Qwen 2.5-7B
Instruction Following (.84)
:30800
🔱 Triton Inference Server
Decision Engine (.83)
:30803
⚡ Qdrant Vector Engine
Semantic Vector Store (.82)
:30633

Cluster D: Shipyard (Docker Swarm)

Swarm VIP: 140.44.4.70
5 RPi 5 Nodes • Keepalived VRRP VIP • Host-Mode Ingress • Portainer EE 2.45
5 Manager Nodes
Keepalived Active/Passive
Swm01: .71
Swm02: .72
Swm03: .73
NPM: .74
Swm05: .75
Active Workloads & Stacks
🚢 Portainer Enterprise
shipyard.snarfnet.net
:9443
🌐 NGINX Proxy Manager
Host Mode Ingress (.74)
:80/:443
🔔 Gotify Notifications
gotify.snarfnet.net
:8090
🧭 Heimdall Landing
portal.snarfnet.net
:85
💻 MeshCentral Remote
mesh.snarfnet.net
:8086
📦 Homebox Inventory
homebox.snarfnet.net
:3100
💾

Storage SAN & Distributed Volumes (VLAN 40)

14.10.10.0/25
SnarfNAS (Synology DSM) 14.10.10.72

Primary NFS/SMB target, multi-drive RAID, media libraries, Time Machine, off-site replication.

SN-NAS (TrueNAS SCALE) 14.10.10.71

ZFS high-speed pool, iSCSI volumes for hypervisors, automated snapshot mirrors.

Longhorn Spaceport Storage 1.14 TiB Total

Replicated block storage across Spaceport workers (262 GiB used, 908 GiB free).

Longhorn Aerodrome Storage Flash NVMe

Low-latency distributed storage backing Prometheus, Grafana, and MariaDB databases.

🏡

Smart Home & Edge AI Fabric (VLAN 50)

14.4.4.0/25
Home Assistant Yellow 14.4.4.20:8123

Primary smart home automation hub, Zigbee/Z-Wave networks, Matter, local voice processing.

Tempest Weather Station Direct HA Telemetry

Local UDP & cloud backyard weather station (Temp, Feels Like, Humidity, Wind Speed rounded to 0.1°).

NUT Master Daemon 14.4.4.44:3493

Network UPS Tools master daemon monitoring central battery units, broadcast shutdown signals.

Hailo-8 Edge NPU Node 140.44.4.7:8000

Dedicated Raspberry Pi 5 with 26 TOPS Hailo-8 AI acceleration running lightweight local LLMs.