GrapheneOS servers
This is a detailed list of the public GrapheneOS servers.
We use hardened local machines for building and signing rather than servers outside our physical control, so information on that infrastructure is outside the scope of this page but may be provided in the future elsewhere.
GrapheneOS website and network services
These are the servers servers for our website, HTTP/HTTPS connectivity checks, HTTPS network time, NTP (for Qualcomm XTRA), Broadcom PSDS cache, Samsung PSDS cache, Qualcomm PSDS (XTRA) cache, SUPL proxy, attestation key provisioning proxy, Vanadium component update check/download proxy, network location proxy and geocoding proxy.
Specs:
- 7x OVH VPS vps2023-le-2
- 2 core
- 2 GB memory
- 40 GB NVMe SSD storage
- 500 Mbit/s bandwidth
- 1x BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- grapheneos.org
- www.grapheneos.org
- grapheneos.app
- www.grapheneos.app
- grapheneos.ca
- www.grapheneos.ca
- grapheneos.com
- www.grapheneos.com
- grapheneos.dev
- www.grapheneos.dev
- grapheneos.foundation
- www.grapheneos.foundation
- grapheneos.info
- www.grapheneos.info
- grapheneos.net
- www.grapheneos.net
- grapheneos.ovh
- www.grapheneos.ovh
- grapheneos.page
- www.grapheneos.page
- vanadium.app
- www.vanadium.app
- grapheneos.network - HTTP/HTTPS connectivity checks
- connectivitycheck.grapheneos.network - HTTP/HTTPS connectivity checks
- www.grapheneos.network
- grapheneos.online - HTTP/HTTPS connectivity checks
- connectivitycheck.grapheneos.online - HTTP/HTTPS connectivity checks
- www.grapheneos.online
- broadcom.psds.grapheneos.org - HTTPS Broadcom PSDS data cache
- samsung.psds.grapheneos.org - HTTPS Samsung PSDS data cache
- qualcomm.psds.grapheneos.org - HTTPS Qualcomm PSDS data cache
- remoteprovisioning.grapheneos.org - HTTPS reverse proxy to remoteprovisioning.google.com
- widevineprovisioning.grapheneos.org - HTTPS reverse proxy for Widevine provisioning
- time.grapheneos.org - HTTPS time server with millisecond precision X-Time header
- supl.grapheneos.org - TLS reverse proxy to supl.google.com
- nominatim.grapheneos.org - HTTPS reverse proxy to nominatim.openstreetmap.org, which will become our own instance of Nominatim instead of a proxy
- gs-loc.apple.grapheneos.org - HTTPS reverse proxy to Apple's network location service, which will remain an option after we have our own location service
- update.vanadium.app - HTTPS reverse proxy to update.googleapis.com for Chromium component updates (will be hosted directly in the future)
- dl.vanadium.app - HTTPS reverse proxy to CDNs for Chromium component updates (will be hosted directly in the future)
IPs:
- 51.222.156.101 (bhs0.grapheneos.org) — OVH bhs6
- 2607:5300:205:200::29c6 (bhs0.grapheneos.org) — OVH bhs6
- 51.222.159.116 (bhs1.grapheneos.org) — OVH bhs6
- 2607:5300:205:200::2584 (bhs1.grapheneos.org) — OVH bhs6
- 57.129.65.223 (fra.grapheneos.org) — OVH de2
- 2001:41d0:701:1100::245b (fra.grapheneos.org) — OVH de2
- 54.37.41.189 (gra.grapheneos.org) — OVH gra8
- 2001:41d0:304:200::b109 (gra.grapheneos.org) — OVH gra8
- 15.204.8.153 (hio.grapheneos.org) — OVH us-west-or-2
- 2604:2dc0:202:300::23a6 (hio.grapheneos.org) — OVH us-west-or-2
- 209.141.37.35 (las.grapheneos.org) — BuyVM Las Vegas
- 2605:6400:20:387:72d4:dab9:a369:f351 (las.grapheneos.org) — BuyVM Las Vegas
- 51.79.160.50 (sin0.grapheneos.org) — OVH sgp2
- 2402:1f00:8000:800::16d6 (sin0.grapheneos.org) — OVH sgp2
- 51.79.161.36 (sin1.grapheneos.org) — OVH sgp2
- 2402:1f00:8000:800::1949 (sin1.grapheneos.org) — OVH sgp2
Ports:
- TCP 22 ssh
- TCP 80 http
- UDP 123 ntp
- TCP 443 https
- TCP 7275 supl
Staging GrapheneOS website and network services
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- staging.grapheneos.org
IPs:
- 199.195.250.78 — BuyVM New York
- 2605:6400:10:9d6:6d84:e183:acda:16d7 — BuyVM New York
Ports:
- TCP 22 ssh
- TCP 80 http
- UDP 123 ntp
- TCP 443 https
- TCP 7275 supl
GrapheneOS release servers
These are the static file servers for GrapheneOS releases and our app repository. These are used by the releases page and web installer along with the System Updater and App Store (app repository client) within the OS.
Specs:
- 2x ReliableSite dedicated server (sponsored by ReliableSite)
- Ryzen 9900X
- 192 GB DDR5
- 2x 4 TB NVMe SSD storage
- 10000 Mbit/s bandwidth
- Tempest dedicated server (sponsored by Tempest)
- Ryzen 5950X
- 128 GB DDR4
- 2x 1 TB NVMe SSD storage
- 10000 Mbit/s bandwidth
Domains:
- releases.grapheneos.org
- seamlessupdate.app
- www.seamlessupdate.app
- apps.grapheneos.org
IPs:
- 104.194.8.203 (lax.releases.grapheneos.org) — ReliableSite Los Angeles
- 2605:9880:200:20::113 (lax.releases.grapheneos.org) — ReliableSite Los Angeles
- 45.88.230.12 (lon.releases.grapheneos.org) — Tempest London
- 172.96.172.37 (mia.releases.grapheneos.org) — ReliableSite Miami
- 2605:9880:400:1100:15:1240:515:6e (mia.releases.grapheneos.org) — ReliableSite Miami
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS mail server
Specs:
- OVH VPS vps2023-le-2
- 2 core
- 2 GB memory
- 40 GB NVMe SSD storage
- 500 Mbit/s bandwidth
Domains:
- mail.grapheneos.net
- mail.grapheneos.org
- mta-sts.attestation.app
- mta-sts.discuss.grapheneos.org
- mta-sts.grapheneos.app
- mta-sts.grapheneos.ca
- mta-sts.grapheneos.com
- mta-sts.grapheneos.dev
- mta-sts.grapheneos.foundation
- mta-sts.grapheneos.info
- mta-sts.grapheneos.net
- mta-sts.grapheneos.network
- mta-sts.grapheneos.online
- mta-sts.grapheneos.org
- mta-sts.grapheneos.ovh
- mta-sts.grapheneos.page
- mta-sts.grapheneos.social
- mta-sts.mail.grapheneos.org
- mta-sts.matrix.grapheneos.org
- mta-sts.seamlessupdate.app
- mta-sts.vanadium.app
IPs:
- 192.99.98.22 — OVH bhs6
- 2607:5300:205:200::472f — OVH bhs6
Ports:
- TCP 22 ssh
- TCP 25 smtp
- TCP 80 http
- TCP 443 https
- TCP 465 submissions
- TCP 993 imaps
GrapheneOS discussion forum server
Specs:
- OVH VPS vps2023-le-4
- 4 core
- 4 GB memory
- 80 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- discuss.grapheneos.org
IPs:
- 51.222.14.6 — OVH bhs6
- 2607:5300:205:200::29e8 — OVH bhs6
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS Matrix server
This server primarily runs the synapse Matrix server with PostgreSQL behind an nginx web server. It also runs the mjolnir bot for moderation and matterbridge is used to implement a bridge between Discord, Matrix, Telegram and IRC.
Specs:
- OVH VPS vps2020-comfort-4-8-160
- 4 core
- 8 GB memory
- 160 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- matrix.grapheneos.org
- element.grapheneos.org
IPs:
- 51.79.51.42 — OVH bhs6
- 2607:5300:205:200::26e1 — OVH bhs6
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS DNS servers
Specs:
- 7x Vultr vhp-1c-1gb-amd
- 1 core
- 1 GB memory
- 25 GB NVMe SSD storage
- 4x BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- ns1.attestation.app
- ns1.grapheneos.app
- ns1.grapheneos.ca
- ns1.grapheneos.com
- ns1.grapheneos.dev
- ns1.grapheneos.foundation
- ns1.grapheneos.info
- ns1.grapheneos.net
- ns1.grapheneos.network
- ns1.grapheneos.online
- ns1.grapheneos.org
- ns1.grapheneos.ovh
- ns1.grapheneos.page
- ns1.grapheneos.social
- ns1.seamlessupdate.app
- ns1.vanadium.app
- ns2.attestation.app
- ns2.grapheneos.app
- ns2.grapheneos.ca
- ns2.grapheneos.com
- ns2.grapheneos.dev
- ns2.grapheneos.foundation
- ns2.grapheneos.info
- ns2.grapheneos.net
- ns2.grapheneos.network
- ns2.grapheneos.online
- ns2.grapheneos.org
- ns2.grapheneos.ovh
- ns2.grapheneos.page
- ns2.grapheneos.social
- ns2.seamlessupdate.app
- ns2.vanadium.app
IPs:
- 185.187.152.9 (anycast), 80.240.20.200 (fra.ns1.grapheneos.org) — Vultr Frankfurt
- 2602:f4d9::1 (anycast), 2a05:f480:1800:2acd:5400:05ff:fec2:23a1 (fra.ns1.grapheneos.org) — Vultr Frankfurt
- 185.187.152.9 (anycast), 140.82.23.46 (lax.ns1.grapheneos.org) — Vultr Los Angeles
- 2602:f4d9::1 (anycast), 2001:19f0:6000:2dcd:5400:05ff:fec1:97db (lax.ns1.grapheneos.org) — Vultr Los Angeles
- 185.187.152.9 (anycast), 192.248.159.52 (lon.ns1.grapheneos.org) — Vultr London
- 2602:f4d9::1 (anycast), 2001:19f0:7400:8669:5400:05ff:fec3:f3f8 (lon.ns1.grapheneos.org) — Vultr London
- 185.187.152.9 (anycast), 45.32.173.220 (mia.ns1.grapheneos.org) — Vultr Miami
- 2602:f4d9::1 (anycast), 2001:19f0:9002:2981:5400:05ff:fec1:65c4 (mia.ns1.grapheneos.org) — Vultr Miami
- 185.187.152.9 (anycast), 66.135.8.22 (nyc.ns1.grapheneos.org) — Vultr New Jersey
- 2602:f4d9::1 (anycast), 2001:19f0:1000:c0d4:5400:05ff:fec1:7c21 (nyc.ns1.grapheneos.org) — Vultr New Jersey
- 185.187.152.9 (anycast), 66.42.74.68 (sea.ns1.grapheneos.org) — Vultr Seattle
- 2602:f4d9::1 (anycast), 2001:19f0:8001:0438:5400:05ff:fec1:9dbd (sea.ns1.grapheneos.org) — Vultr Seattle
- 185.187.152.9 (anycast), 139.180.154.140 (sin.ns1.grapheneos.org) — Vultr Singapore
- 2602:f4d9::1 (anycast), 2401:c080:1400:4890:5400:05ff:fec2:23b0 (sin.ns1.grapheneos.org) — Vultr Singapore
- 23.149.124.1 (anycast), 198.251.90.93 (fallback anycast), 107.189.3.168 (brn.ns2.grapheneos.org) — BuyVM Bern
- 2602:f4d9:1::1 (anycast), 2605:6400:30:ec25:102c:af6d:5be:1eb8 (brn.ns2.grapheneos.org) — BuyVM Bern
- 23.149.124.1 (anycast), 198.251.90.93 (fallback anycast), 205.185.124.155 (las.ns2.grapheneos.org) — BuyVM Las Vegas
- 2602:f4d9:1::1 (anycast), 2605:6400:20:1c8f:a0c9:372d:482e:945b (las.ns2.grapheneos.org) — BuyVM Las Vegas
- 23.149.124.1 (anycast), 198.251.90.93 (fallback anycast), 2605:6400:40:ffbd:14e7:d270:fd75:600c (mia.ns2.grapheneos.org) — BuyVM Miami
- 2602:f4d9:1::1 (anycast), 2605:6400:20:1c8f:a0c9:372d:482e:945b (mia.ns2.grapheneos.org) — BuyVM Miami
- 23.149.124.1 (anycast), 198.251.90.93 (fallback anycast), 198.98.53.141 (nyc.ns2.grapheneos.org) — BuyVM New York
- 2602:f4d9:1::1 (anycast), 2605:6400:10:102e:95bc:89ef:2e7f:49bb (nyc.ns2.grapheneos.org) — BuyVM New York
Ports:
- TCP 22 ssh
- TCP 53 domain
- UDP 53 domain
- TCP 80 http
- TCP 443 https
- TCP 853 domain-s
Staging GrapheneOS DNS server
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- ns1.staging.attestation.app
- ns2.staging.attestation.app
- ns1.staging.grapheneos.org
- ns2.staging.grapheneos.org
IPs:
- 198.98.56.238 — BuyVM New York
- 2605:6400:10:c41:de92:c534:326a:711a — BuyVM New York
Ports:
- TCP 22 ssh
- TCP 53 domain
- UDP 53 domain
- TCP 80 http
- TCP 443 https
- TCP 853 domain-s
Attestation website and service
Specs:
- OVH VPS vps2023-le-4
- 4 core
- 4 GB memory
- 80 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- attestation.app
- www.attestation.app
IPs:
- 51.79.66.27 — OVH bhs6
- 2607:5300:205:200::7e9 — OVH bhs6
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
Staging attestation website and service
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- staging.attestation.app
IPs:
- 198.98.57.157 — BuyVM New York
- 2605:6400:10:aa9:1c0f:44d3:da15:c0ec — BuyVM New York
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https