GrapheneOS servers
This is a detailed list of the public GrapheneOS servers.
We use hardened local machines for building and signing rather than servers outside our physical control, so information on that infrastructure is outside the scope of this page but may be provided in the future elsewhere.
GrapheneOS DNS servers
Specs:
- System container on yto.grapheneos.org
- Xenyth dedicated server (sponsored by Xenyth)
- Xeon E5-2680 v4
- 128 GiB DDR4
- 2x 1 TB SATA SSD storage
- 10 Gbit/s bandwidth
- 12x Vultr vhp-1c-1gb-amd
- 1 core
- 1 GiB memory
- 25 GiB NVMe SSD storage
- Misaka.io S3N-1C2G (at 50% discount due to S3N-1C2G shortage)
- 1 core
- 2 GiB memory
- 32 GiB NVMe SSD storage
- 2x Misaka.io S3N-1C1G
- 1 core
- 1 GiB memory
- 16 GiB NVMe SSD storage
- Misaka.io S2N-1C2G (at 50% discount due to S2N-1C1G shortage)
- 1 core
- 2 GiB memory
- 32 GiB NVMe SSD storage
- 4x Misaka.io S2N-1C1G
- 1 core
- 1 GiB memory
- 16 GiB NVMe SSD storage
Locations:
| Name | Location | Provider | Type | IPv4 addresses | IPv6 addresses |
| bom.ns1.grapheneos.org | Mumbai | Vultr | vhp-1c-1gb-amd | 23.149.124.1 (anycast), 65.20.91.33 | 2602:f4d9::1 (anycast), 2401:c080:2400:1814:5400:05ff:fec5:d503 |
| dfw.ns1.grapheneos.org | Dallas | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 149.28.240.214 | 2602:f4d9::1 (anycast), 2001:19f0:6401:1802:5400:05ff:fef7:7b7e |
| ewr.ns1.grapheneos.org | Piscataway | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 66.135.8.22 | 2602:f4d9::1 (anycast), 2001:19f0:1000:c0d4:5400:05ff:fec1:7c21 |
| fra.ns1.grapheneos.org | Frankfurt | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 80.240.20.200 | 2602:f4d9::1 (anycast), 2a05:f480:1800:2acd:5400:05ff:fec2:23a1 |
| lax.ns1.grapheneos.org | Los Angeles | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 140.82.23.46 | 2602:f4d9::1 (anycast), 2001:19f0:6000:2dcd:5400:05ff:fec1:97db |
| lon.ns1.grapheneos.org | London | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 192.248.159.52 | 2602:f4d9::1 (anycast), 2001:19f0:7400:8669:5400:05ff:fec3:f3f8 |
| mia.ns1.grapheneos.org | Miami | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 104.207.147.19 | 2602:f4d9::1 (anycast), 2001:19f0:9000:2605:5400:05ff:feed:7df5 |
| sao.ns1.grapheneos.org | São Paulo | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 216.238.118.134 | 2602:f4d9::1 (anycast), 2001:19f0:b800:14a9:5400:05ff:feca:f136 |
| sea.ns1.grapheneos.org | Seattle | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 66.42.74.68 | 2602:f4d9::1 (anycast), 2001:19f0:8001:0438:5400:05ff:fec1:9dbd |
| sin.ns1.grapheneos.org | Singapore | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 139.180.154.140 | 2602:f4d9::1 (anycast), 2401:c080:1400:4890:5400:05ff:fec2:23b0 |
| syd.ns1.grapheneos.org | Sydney | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 45.63.28.82 | 2602:f4d9::1 (anycast), 2401:c080:1800:141d:5400:05ff:fec5:d41b |
| tyo.ns1.grapheneos.org | Tokyo | Vultr | vhp-1c-1gb-amd | 24.149.124.1 (anycast), 66.42.42.15 | 2602:f4d9::1 (anycast), 2001:19f0:7001:5695:5400:05ff:fec4:e394 |
| ber.ns2.grapheneos.org | Berlin | Misaka.io | S3N-1C1G | 24.149.125.1 (anycast), 194.156.154.116 | 2602:f4d9:1::1 (anycast), 2a12:8d02:2100:176:26a3:f0ff:fe49:eda8 |
| iad.ns2.grapheneos.org | Ashburn | Misaka.io | S2N-1C1G | 24.149.125.1 (anycast), 38.175.99.47 | 2602:f4d9:1::1 (anycast), 2a0b:4342:1a32:db:26a3:f0ff:fe47:dfec |
| lon.ns2.grapheneos.org | London | Misaka.io | S2N-1C1G | 24.149.125.1 (anycast), 45.142.244.163 | 2602:f4d9:1::1 (anycast), 2a0f:3b03:101:2d3:26a3:f0ff:fe4a:594 |
| mia.ns2.grapheneos.org | Miami | Misaka.io | S2N-1C1G | 24.149.125.1 (anycast), 38.175.100.57 | 2602:f4d9:1::1 (anycast), 2a0e:6902:5010:d9:26a3:f0ff:fe48:de47 |
| sea.ns2.grapheneos.org | Singapore | Misaka.io | S2N-1C2G | 24.149.125.1 (anycast), 38.175.102.38 | 2602:f4d9:1::1 (anycast), 2a0e:6901:201:dd:26a3:f0ff:fe48:6091 |
| sjc.ns2.grapheneos.org | San Jose | Misaka.io | S2N-1C1G | 24.149.125.1 (anycast), 38.175.105.122 | 2602:f4d9:1::1 (anycast), 2a0e:6901:410:ab:26a3:f0ff:fe4a:c8d6 |
| sin.ns2.grapheneos.org | Singapore | Misaka.io | S3N-1C1G | 24.149.125.1 (anycast), 194.156.163.89 | 2602:f4d9:1::1 (anycast), 2407:b9c0:e002:226:26a3:f0ff:fe47:8f06 |
| tyo.ns2.grapheneos.org | Tokyo | Misaka.io | S3N-1C2G | 24.149.125.1 (anycast), 103.170.233.149 | 2602:f4d9:1::1 (anycast), 2407:b9c0:1:2af:26a3:f0ff:fe46:bede |
| yto.ns2.grapheneos.org | Toronto | Xenyth | System container on yto.grapheneos.org | 24.149.125.1 (anycast), 91.246.30.3 | 2602:f4d9:1::1 (anycast), 2602:f4d9:5:2::1 |
Domains:
- ns1.attestation.app
- ns1.grapheneos.app
- ns1.grapheneos.ca
- ns1.grapheneos.com
- ns1.grapheneos.dev
- ns1.grapheneos.foundation
- ns1.grapheneos.info
- ns1.grapheneos.net
- ns1.grapheneos.network
- ns1.grapheneos.online
- ns1.grapheneos.org
- ns1.grapheneos.ovh
- ns1.grapheneos.page
- ns1.grapheneos.social
- ns1.seamlessupdate.app
- ns1.vanadium.app
- ns2.attestation.app
- ns2.grapheneos.app
- ns2.grapheneos.ca
- ns2.grapheneos.com
- ns2.grapheneos.dev
- ns2.grapheneos.foundation
- ns2.grapheneos.info
- ns2.grapheneos.net
- ns2.grapheneos.network
- ns2.grapheneos.online
- ns2.grapheneos.org
- ns2.grapheneos.ovh
- ns2.grapheneos.page
- ns2.grapheneos.social
- ns2.seamlessupdate.app
- ns2.vanadium.app
Ports:
- TCP 22 ssh
- TCP 53 domain
- UDP 53 domain
- TCP 80 http
- TCP 443 https
- TCP 853 domain-s
Staging GrapheneOS DNS server
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GiB memory
- 20 GiB NVMe SSD storage
- 1 Gbit/s bandwidth
Location: New York City
IPv4 address: 198.98.56.238
IPv6 addresses: 2602:f4d9:4::1, 2605:6400:10:c41:de92:c534:326a:711a
Domains:
- ns1.staging.attestation.app
- ns2.staging.attestation.app
- ns1.staging.grapheneos.org
- ns2.staging.grapheneos.org
Ports:
- TCP 22 ssh
- TCP 53 domain
- UDP 53 domain
- TCP 80 http
- TCP 443 https
- TCP 853 domain-s
GrapheneOS website and network services
These are the servers for our website, HTTP/HTTPS connectivity checks, HTTPS network time, NTP (for Qualcomm XTRA), Broadcom PSDS cache, Samsung PSDS cache, Qualcomm PSDS (XTRA) cache, SUPL proxy, attestation key provisioning proxy, Vanadium component update check/download proxy, network location proxy and geocoding proxy.
Specs:
- 2x ReliableSite dedicated server (sponsored by ReliableSite)
- Ryzen 9900X
- 192 GiB DDR5
- 2x 4 TB NVMe SSD storage
- 10 Gbit/s bandwidth
- Cherry Servers dedicated server (sponsored by Cherry Servers)
- Ryzen 9950X
- 192 GiB DDR5
- 2x 4 TB NVMe SSD storage
- 20 Gbit/s bandwidth (via 2x 10 Gbit/s)
- Zare dedicated server (sponsored by Zare)
- Xeon Silver 4214
- 128 GiB DDR4
- 2x 2 TB NVMe SSD storage
- 10 Gbit/s bandwidth
- Xenyth dedicated server (sponsored by Xenyth)
- Xeon E5-2680 v4
- 128 GiB DDR4
- 2x 1 TB SATA SSD storage
- 10 Gbit/s bandwidth
- netcup VPS 500 G12
- 2 cores
- 4 GiB memory
- 128 GiB NVMe SSD storage
- 2.5 Gbit/s bandwidth
- 5x Vultr vhp-1c-1gb-amd
- 1 core
- 1 GiB memory
- 25 GiB NVMe SSD storage
Locations:
| Name | Location | Provider | Type | IPv4 address | IPv6 address |
| ams.grapheneos.org | Amsterdam | Cherry Servers | Dedicated | 84.32.64.33 | |
| lax.grapheneos.org | Los Angeles | ReliableSite | Dedicated | 104.194.8.203 | 2605:9880:200:400:135:7700:ef0a:81 |
| lon.grapheneos.org | London | Zare | Dedicated | 185.44.76.161 | 2a01:4020:0:52::2 |
| mia.grapheneos.org | Miami | ReliableSite | Dedicated | 172.96.172.37 | 2605:9880:400:1100:15:1240:515:6e |
| nue.grapheneos.org | Nuremberg | netcup | VPS 500 G12 | 159.195.46.80 | 2a0a:4cc0:c1:9de2::1 |
| sao.grapheneos.org | São Paulo | Vultr | vhp-1c-1gb-amd | 216.238.116.202 | 2001:19f0:b800:1f13:5400:05ff:fed0:8ea7 |
| sea.grapheneos.org | Seattle | Vultr | vhp-1c-1gb-amd | 45.32.230.4 | 2001:19f0:8000:3454:5400:05ff:fec8:4139 |
| sin.grapheneos.org | Singapore | Vultr | vhp-1c-1gb-amd | 66.42.50.166 | 2001:19f0:4400:2c24:5400:05ff:fec7:4cdc |
| syd.grapheneos.org | Sydney | Vultr | vhp-1c-1gb-amd | 107.191.57.135 | 2401:c080:1800:1c40:5400:05ff:fec7:c902 |
| tyo.grapheneos.org | Tokyo | Vultr | vhp-1c-1gb-amd | 207.148.108.82 | 2401:c080:1000:13f8:5400:05ff:fee8:3c8b |
| yto.grapheneos.org | Toronto | Xenyth | Dedicated | 91.246.30.2 | 2602:f4d9:5:1::1 |
Domains:
- grapheneos.org
- www.grapheneos.org
- grapheneos.app
- www.grapheneos.app
- grapheneos.ca
- www.grapheneos.ca
- grapheneos.com
- www.grapheneos.com
- grapheneos.dev
- www.grapheneos.dev
- grapheneos.foundation
- www.grapheneos.foundation
- grapheneos.info
- www.grapheneos.info
- grapheneos.net
- www.grapheneos.net
- grapheneos.ovh
- www.grapheneos.ovh
- grapheneos.page
- www.grapheneos.page
- vanadium.app
- www.vanadium.app
- grapheneos.network - HTTP/HTTPS connectivity checks
- connectivitycheck.grapheneos.network - HTTP/HTTPS connectivity checks
- www.grapheneos.network
- grapheneos.online - HTTP/HTTPS connectivity checks
- connectivitycheck.grapheneos.online - HTTP/HTTPS connectivity checks
- www.grapheneos.online
- broadcom.psds.grapheneos.org - HTTPS Broadcom PSDS data cache
- samsung.psds.grapheneos.org - HTTPS Samsung PSDS data cache
- qualcomm.psds.grapheneos.org - HTTPS Qualcomm PSDS data cache
- remoteprovisioning.grapheneos.org - HTTPS reverse proxy to remoteprovisioning.google.com
- widevineprovisioning.grapheneos.org - HTTPS reverse proxy for Widevine provisioning
- time.grapheneos.org - HTTPS time server with millisecond precision X-Time header
- supl.grapheneos.org - TLS reverse proxy to supl.google.com
- nominatim.grapheneos.org - HTTPS reverse proxy to nominatim.openstreetmap.org, which will become our own instance of Nominatim instead of a proxy
- gs-loc.apple.grapheneos.org - HTTPS reverse proxy to Apple's network location service, which will remain an option after we have our own location service
- update.vanadium.app - HTTPS reverse proxy to update.googleapis.com for Chromium component updates (will be hosted directly in the future)
- dl.vanadium.app - HTTPS reverse proxy to CDNs for Chromium component updates (will be hosted directly in the future)
Ports:
- TCP 22 ssh
- TCP 80 http
- UDP 123 ntp
- TCP 443 https
- TCP 7275 supl
Staging GrapheneOS website and network services
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GiB memory
- 20 GiB NVMe SSD storage
- 1 Gbit/s bandwidth
Location: New York City
IPv4: 199.195.250.78
IPv6: 2605:6400:10:9d6:6d84:e183:acda:16d7
Domains:
- staging.grapheneos.org
Ports:
- TCP 22 ssh
- TCP 80 http
- UDP 123 ntp
- TCP 443 https
- TCP 7275 supl
GrapheneOS release servers
These are the static file servers for GrapheneOS releases and our app repository. These are used by the releases page and web installer along with the System Updater and App Store (app repository client) within the OS.
Specs:
- 2x ReliableSite dedicated server (sponsored by ReliableSite)
- Ryzen 9900X
- 192 GiB DDR5
- 2x 4 TB NVMe SSD storage
- 10 Gbit/s bandwidth
- Cherry Servers dedicated server (sponsored by Cherry Servers)
- Ryzen 9950X
- 192 GiB DDR5
- 2x 4 TB NVMe SSD storage
- 20 Gbit/s bandwidth (via 2x 10 Gbit/s)
- Zare dedicated server (sponsored by Zare)
- Xeon Silver 4214
- 128 GiB DDR4
- 2x 2 TB NVMe SSD storage
- 10 Gbit/s bandwidth
- Xenyth dedicated server (sponsored by Xenyth)
- Xeon E5-2680 v4
- 128 GiB DDR4
- 2x 1 TB SATA SSD storage
- 10 Gbit/s bandwidth
Locations:
| Name | Location | Provider | Type | IPv4 address | IPv6 address |
| ams.grapheneos.org | Amsterdam | Cherry Servers | Dedicated | 84.32.64.33 | |
| lax.grapheneos.org | Los Angeles | ReliableSite | Dedicated | 104.194.8.203 | 2605:9880:200:400:135:7700:ef0a:81 |
| lon.grapheneos.org | London | Zare | Dedicated | 185.44.76.161 | 2a01:4020:0:52::2 |
| mia.grapheneos.org | Miami | ReliableSite | Dedicated | 172.96.172.37 | 2605:9880:400:1100:15:1240:515:6e |
| yto.grapheneos.org | Toronto | Xenyth | Dedicated | 91.246.30.2 | 2602:f4d9:5:1::1 |
Domains:
- releases.grapheneos.org
- seamlessupdate.app
- www.seamlessupdate.app
- apps.grapheneos.org
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS geocoding servers
Specs:
- Cherry Servers dedicated server (sponsored by Cherry Servers)
- Ryzen 9950X
- 192 GiB DDR5
- 2x 4 TB NVMe SSD storage
- 20 Gbit/s bandwidth (via 2x 10 Gbit/s)
Location: Amsterdam
IPv4 address: 84.32.64.35
Domains:
- ams.nominatim.grapheneos.org
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
Attestation website and service
Specs:
- netcup RS 1000 G12 Ultra
- 6 dedicated cores (EPYC 9645)
- 12 GiB memory
- 512 GiB NVMe SSD storage
- 2.5 Gbit/s bandwidth
Location: Nuremberg
IPv4 address: 159.195.67.50
IPv6 address: 2a0a:4cc0:c2:1cf3::1
Domains:
- attestation.app
- www.attestation.app
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
Staging attestation website and service
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GiB memory
- 20 GiB NVMe SSD storage
- 1 Gbit/s bandwidth
Location: New York City
IPv4 address: 198.98.57.157
IPv6 address: 2605:6400:10:aa9:1c0f:44d3:da15:c0ec
Domains:
- staging.attestation.app
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS mail server
Specs:
- System container on yto.grapheneos.org
- Xenyth dedicated server (sponsored by Xenyth)
- Xeon E5-2680 v4
- 128 GiB DDR4
- 2x 1 TB SATA SSD storage
- 10 Gbit/s bandwidth
Location: Toronto
IPv4 address: 91.246.30.4
IPv6 address: 2602:f4d9:5:3::1
Domains:
- mail.grapheneos.net
- mail.grapheneos.org
- mta-sts.attestation.app
- mta-sts.discuss.grapheneos.org
- mta-sts.grapheneos.app
- mta-sts.grapheneos.ca
- mta-sts.grapheneos.com
- mta-sts.grapheneos.dev
- mta-sts.grapheneos.foundation
- mta-sts.grapheneos.info
- mta-sts.grapheneos.net
- mta-sts.grapheneos.network
- mta-sts.grapheneos.online
- mta-sts.grapheneos.org
- mta-sts.grapheneos.ovh
- mta-sts.grapheneos.page
- mta-sts.grapheneos.social
- mta-sts.mail.grapheneos.org
- mta-sts.matrix.grapheneos.org
- mta-sts.seamlessupdate.app
- mta-sts.vanadium.app
Ports:
- TCP 22 ssh
- TCP 25 smtp
- TCP 80 http
- TCP 443 https
- TCP 465 submissions
- TCP 993 imaps
GrapheneOS discussion forum server
Specs:
- netcup RS 1000 G12 Ultra
- 6 dedicated cores (EPYC 9645)
- 12 GiB memory
- 512 GiB NVMe SSD storage
- 2.5 Gbit/s bandwidth
Location: Manassas
IPv4 address: 152.53.168.153
IPv6 address: 2a0a:4cc0:2000:aa27::1
Domains:
- discuss.grapheneos.org
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS Matrix server
This server primarily runs the synapse Matrix server with PostgreSQL behind an nginx web server. It also runs the mjolnir bot for moderation and matterbridge is used to implement a bridge between Discord, Matrix and Telegram.
Specs:
- netcup RS 2000 G12 Ultra
- 10 dedicated cores (EPYC 9645)
- 24 GiB memory
- 1 TiB NVMe SSD storage
- 2.5 Gbit/s bandwidth
Location: Manassas
IPv4 address: 152.53.39.88
IPv6 address: 2a0a:4cc0:2000:dbc::1
Domains:
- matrix.grapheneos.org
- element.grapheneos.org
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https