netstack
LAN Overview
Netstack Pillars
Netstack focuses on three technology pillars. The network IP scheme below is an opinionated map for primary gateways, secondaries, backups and documents.
- Pillar 1 - Network - ng
- Pillar 2 - Storage - sg
- Pillar 3 - Compute - cg
This gateway model is the organizing principle for each site’s site-config.yml — see the site-config.yml Schema. The IP map below is a convention (a self-documenting hint when you control address assignment), not a hard requirement: gateways are declared by function, and their actual IP is whatever it happens to be.
Standard IP Map
| IP | lan | purpose |
|---|---|---|
| x.x.x.1 | ng.ns.lan | ng - network gateway |
| x.x.x.2 | sg.ns.lan | sg - storage gateway |
| x.x.x.3 | cg.ns.lan | cg - compute gateway |
| x.x.x.4 | bg2.ns.lan | bg - backups gateway secondary |
| x.x.x.5 | ng2.ns.lan | ng - network gateway secondary |
| x.x.x.6 | sg2.ns.lan | sg - storage gateway secondary |
| x.x.x.7 | cg2.ns.lan | cg - compute gateway secondary |
| x.x.x.8 | bg.ns.lan | bg - backups gateway |
| x.x.x.9 | dg.ns.lan | dg - documents gateway |
Deployment Sites
| nslocation | subnet | gateway | PIP | note |
|---|---|---|---|---|
| cf.ns.lan | 192.168.6.0/24 | 192.168.6.1 | 192.111.21.62 | cedar-falls (Fletch) |
| sl.ns.lan | 192.168.1.0/24 | 192.168.1.1 | 24.216.208.251 | silver-lake — ISP DHCP (Spectrum modem), NOT operator-controlled |
| wf.ns.lan | 192.168.9.0/24 | 192.168.9.1 | x.x.x.x | winfield — mikrotik/pfsense gw; WAN via Starlink; devwin10 currently moved off-netstack |
⚠️ Subnet reconciliation (netstack#28):
- cf —
192.168.6.0/24consistent.- sl — resolved 2026-09-25 (operator-confirmed):
192.168.1.0/24, gw192.168.1.1(Spectrum modem). The reposite-config.ymlwas correct; this table’s old192.168.0.0/24/192.168.9.0/24entry was wrong and is now fixed. sl runs on ISP DHCP the operator does NOT control — exactly why the gateway model maps function, not IP. slwin11ops LAN192.168.1.194; primary ZT10.147.17.94(secondary ZT net10.147.19.13).- wf — resolved 2026-09-25 (operator-confirmed):
192.168.9.0/24, gw192.168.9.1(mikrotik/pfsense); WAN uplink via Starlink (192.168.4.1). The reposite-config.ymlwas correct; this table’s old192.168.254.0/24entry was wrong and is now fixed. Reach into wf over ZeroTier: docker LXC10.147.17.26(→192.168.9.11, the SSH door) and Proxmox cg210.147.17.65(→192.168.9.3). Note: devwin10’s physical ethernet is currently moved to a non-netstack segment (192.168.0.x), so devwin10 is not on the wf LAN right now — ZT reaches the site regardless.
Site-specific details: ops/deployments
LAN Sections
- Network - gateways, routing, subnets
- Storage - NAS, file shares
- Compute - hypervisors, containers, workstations