GrapheneOS servers
This is a detailed list of the public GrapheneOS servers.
We use hardened local machines for building and signing rather than servers outside our physical control, so information on that infrastructure is outside the scope of this page but may be provided in the future elsewhere.
GrapheneOS website
Specs:
- 3x OVH VPS vps2023-le-2
- 2 core
- 2 GB memory
- 40 GB NVMe SSD storage
- 500 Mbit/s bandwidth
- 1x BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- grapheneos.org
- www.grapheneos.org
- grapheneos.app
- www.grapheneos.app
- grapheneos.ca
- www.grapheneos.ca
- grapheneos.com
- www.grapheneos.com
- grapheneos.dev
- www.grapheneos.dev
- grapheneos.foundation
- www.grapheneos.foundation
- grapheneos.info
- www.grapheneos.info
- grapheneos.net
- www.grapheneos.net
- grapheneos.ovh
- www.grapheneos.ovh
- grapheneos.page
- www.grapheneos.page
- vanadium.app
- www.vanadium.app
IPs:
- 51.222.156.101 (0.grapheneos.org) — OVH bhs6
- 2607:5300:205:200::29c6 (0.grapheneos.org) — OVH bhs6
- 209.141.35.164 (1.grapheneos.org) — BuyVM Las Vegas
- 2605:6400:20:1131:8088:e08:84e6:632 (1.grapheneos.org) — BuyVM Las Vegas
- 54.37.41.189 (2.grapheneos.org) — OVH gra8
- 2001:41d0:304:200::b109 (2.grapheneos.org) — OVH gra8
- 51.79.160.50 (3.grapheneos.org) — OVH sgp2
- 2402:1f00:8000:800::16d6 (3.grapheneos.org) — OVH sgp2
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
Staging GrapheneOS website
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- staging.grapheneos.org
IPs:
- 199.195.250.78 — BuyVM New York
- 2605:6400:10:9d6:6d84:e183:acda:16d7 — BuyVM New York
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS release servers
These are the static file servers for GrapheneOS releases and our app repository. These are used by the releases page and web installer along with the System Updater and App Store (app repository client) within the OS.
Specs:
- Macarne dedicated server (sponsored by Macarne)
- Ryzen 9950X
- 128 GB DDR5
- 2x 2 TB NVMe SSD storage
- 25000 Mbit/s bandwidth
- 2x ReliableSite dedicated server (sponsored by ReliableSite)
- Ryzen 9900X
- 192 GB DDR5
- 2x 4 TB NVMe SSD storage
- 10000 Mbit/s bandwidth
Domains:
- releases.grapheneos.org
- seamlessupdate.app
- www.seamlessupdate.app
- apps.grapheneos.org
IPs:
- 45.90.185.33 (4.releases.grapheneos.org) — Macarne Amsterdam
- 2a14:3f87:6920:250::100 (4.releases.grapheneos.org) — Macarne Amsterdam
- 172.96.172.37 (5.releases.grapheneos.org) — ReliableSite Miami
- 2605:9880:400:1100:15:1240:515:6e (5.releases.grapheneos.org) — ReliableSite Miami
- 104.194.8.203 (6.releases.grapheneos.org) — ReliableSite Los Angeles
- 2605:9880:200:20::113 (6.releases.grapheneos.org) — ReliableSite Los Angeles
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS network servers
These are the default servers used by GrapheneOS for connectivity checks, secure network time, attestation key provisioning and Predicted Satellite Data Service (PSDS). These either serve empty responses or provide reverse proxies to other services.
Specs:
- 3x OVH VPS vps2023-le-2
- 2 core
- 2 GB memory
- 40 GB NVMe SSD storage
- 500 Mbit/s bandwidth
- 1x BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- grapheneos.network - HTTP/HTTPS connectivity checks
- connectivitycheck.grapheneos.network - HTTP/HTTPS connectivity checks
- www.grapheneos.network
- grapheneos.online - HTTP/HTTPS connectivity checks
- connectivitycheck.grapheneos.online - HTTP/HTTPS connectivity checks
- www.grapheneos.online
- broadcom.psds.grapheneos.org - HTTPS Broadcom PSDS data cache
- samsung.psds.grapheneos.org - HTTPS Samsung PSDS data cache
- qualcomm.psds.grapheneos.org - HTTPS Qualcomm PSDS data cache
- remoteprovisioning.grapheneos.org - HTTPS reverse proxy to remoteprovisioning.google.com
- widevineprovisioning.grapheneos.org - HTTPS reverse proxy for Widevine provisioning
- time.grapheneos.org - HTTPS time server with millisecond precision X-Time header
- supl.grapheneos.org - TLS reverse proxy to supl.google.com
- nominatim.grapheneos.org - HTTPS reverse proxy to nominatim.openstreetmap.org, which will become our own instance of Nominatim instead of a proxy
- gs-loc.apple.grapheneos.org - HTTPS reverse proxy to Apple's network location service, which will remain an option after we have our own location service
- update.vanadium.app - HTTPS reverse proxy to update.googleapis.com for Chromium component updates (will be hosted directly in the future)
- dl.vanadium.app - HTTPS reverse proxy to CDNs for Chromium component updates (will be hosted directly in the future)
IPs:
- 51.222.159.116 (0.grapheneos.network) — OVH bhs6
- 2607:5300:205:200::2584 (0.grapheneos.network) — OVH bhs6
- 209.141.37.35 (1.grapheneos.network) — BuyVM Las Vegas
- 2605:6400:20:387:72d4:dab9:a369:f351 (1.grapheneos.network) — BuyVM Las Vegas
- 54.37.41.188 (2.grapheneos.network) — OVH gra8
- 2001:41d0:304:200::902f (2.grapheneos.network) — OVH gra8
- 51.79.161.36 (3.grapheneos.network) — OVH sgp2
- 2402:1f00:8000:800::1949 (3.grapheneos.network) — OVH sgp2
Ports:
- TCP 22 ssh
- TCP 80 http
- UDP 123 ntp
- TCP 443 https
- TCP 7275 supl
GrapheneOS mail server
Specs:
- OVH VPS vps2023-le-2
- 2 core
- 2 GB memory
- 40 GB NVMe SSD storage
- 500 Mbit/s bandwidth
Domains:
- mail.grapheneos.net
- mail.grapheneos.org
- mta-sts.attestation.app
- mta-sts.discuss.grapheneos.org
- mta-sts.grapheneos.app
- mta-sts.grapheneos.ca
- mta-sts.grapheneos.com
- mta-sts.grapheneos.dev
- mta-sts.grapheneos.foundation
- mta-sts.grapheneos.info
- mta-sts.grapheneos.net
- mta-sts.grapheneos.network
- mta-sts.grapheneos.online
- mta-sts.grapheneos.org
- mta-sts.grapheneos.ovh
- mta-sts.grapheneos.page
- mta-sts.grapheneos.social
- mta-sts.mail.grapheneos.org
- mta-sts.matrix.grapheneos.org
- mta-sts.seamlessupdate.app
- mta-sts.vanadium.app
IPs:
- 192.99.98.22 — OVH bhs6
- 2607:5300:205:200::472f — OVH bhs6
Ports:
- TCP 22 ssh
- TCP 25 smtp
- TCP 80 http
- TCP 443 https
- TCP 465 submissions
- TCP 993 imaps
GrapheneOS discussion forum server
Specs:
- OVH VPS vps2023-le-4
- 4 core
- 4 GB memory
- 80 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- discuss.grapheneos.org
IPs:
- 51.222.14.6 — OVH bhs6
- 2607:5300:205:200::29e8 — OVH bhs6
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS Matrix server
This server primarily runs the synapse Matrix server with PostgreSQL behind an nginx web server. It also runs the mjolnir bot for moderation and matterbridge is used to implement a bridge between Matrix, IRC and Telegram.
Specs:
- OVH VPS vps2020-comfort-4-8-160
- 4 core
- 8 GB memory
- 160 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- matrix.grapheneos.org
- element.grapheneos.org
IPs:
- 51.79.51.42 — OVH bhs6
- 2607:5300:205:200::26e1 — OVH bhs6
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS DNS servers
Specs:
- 4x OVH VPS vps2023-le-2
- 2 core
- 2 GB memory
- 40 GB NVMe SSD storage
- 500 Mbit/s bandwidth
- 3x BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- ns1.attestation.app
- ns1.grapheneos.app
- ns1.grapheneos.ca
- ns1.grapheneos.com
- ns1.grapheneos.dev
- ns1.grapheneos.foundation
- ns1.grapheneos.info
- ns1.grapheneos.net
- ns1.grapheneos.network
- ns1.grapheneos.online
- ns1.grapheneos.org
- ns1.grapheneos.ovh
- ns1.grapheneos.page
- ns1.grapheneos.social
- ns1.seamlessupdate.app
- ns1.vanadium.app
- ns2.attestation.app
- ns2.grapheneos.app
- ns2.grapheneos.ca
- ns2.grapheneos.com
- ns2.grapheneos.dev
- ns2.grapheneos.foundation
- ns2.grapheneos.info
- ns2.grapheneos.net
- ns2.grapheneos.network
- ns2.grapheneos.online
- ns2.grapheneos.org
- ns2.grapheneos.ovh
- ns2.grapheneos.page
- ns2.grapheneos.social
- ns2.seamlessupdate.app
- ns2.vanadium.app
IPs:
- 185.187.152.9 (anycast), 51.161.34.158 (0.ns1.grapheneos.org) — OVH bhs6
- 2a05:b0c4:1::8 (anycast), 2607:5300:205:200::eaa (0.ns1.grapheneos.org) — OVH bhs6
- 185.187.152.9 (anycast), 15.204.8.153 (1.ns1.grapheneos.org) — OVH US us-west-or-2
- 2a05:b0c4:1::8 (anycast), 2604:2dc0:202:300::23a6 (1.ns1.grapheneos.org) — OVH us-west-or-2
- 185.187.152.9 (anycast) 57.129.65.223 (2.ns1.grapheneos.org) — OVH de2
- 2a05:b0c4:1::8 (anycast) 2001:41d0:701:1100::245b (2.ns1.grapheneos.org) — OVH de2
- 185.187.152.9 (anycast) 15.235.197.61 (3.ns1.grapheneos.org) — OVH sgp2
- 2a05:b0c4:1::8 (anycast) 2402:1f00:8000:800::3966 (3.ns1.grapheneos.org) — OVH sgp2
- 198.251.90.93 (anycast), 198.98.53.141 (0.ns2.grapheneos.org) — BuyVM New York
- 2605:6400:10:102e:95bc:89ef:2e7f:49bb (0.ns2.grapheneos.org) — BuyVM New York
- 198.251.90.93 (anycast), 205.185.124.155 (1.ns2.grapheneos.org) — BuyVM Las Vegas
- 2605:6400:20:1c8f:a0c9:372d:482e:945b (1.ns2.grapheneos.org) — BuyVM Las Vegas
- 198.251.90.93 (anycast), 107.189.3.168 (2.ns2.grapheneos.org) — BuyVM Luxembourg
- 2605:6400:30:ec25:102c:af6d:5be:1eb8 (2.ns2.grapheneos.org) — BuyVM Luxembourg
Ports:
- TCP 22 ssh
- TCP 53 domain
- UDP 53 domain
- TCP 80 http
- TCP 443 https
- TCP 853 domain-s
Staging GrapheneOS DNS server
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- ns1.staging.attestation.app
- ns2.staging.attestation.app
- ns1.staging.grapheneos.org
- ns2.staging.grapheneos.org
IPs:
- 198.98.56.238 — BuyVM New York
- 2605:6400:10:c41:de92:c534:326a:711a — BuyVM New York
Ports:
- TCP 22 ssh
- TCP 53 domain
- UDP 53 domain
- TCP 80 http
- TCP 443 https
- TCP 853 domain-s
Attestation website and service
Specs:
- OVH VPS vps2023-le-4
- 4 core
- 4 GB memory
- 80 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- attestation.app
- www.attestation.app
IPs:
- 51.79.66.27 — OVH bhs6
- 2607:5300:205:200::7e9 — OVH bhs6
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
Staging attestation website and service
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GB memory
- 20 GB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- staging.attestation.app
IPs:
- 198.98.57.157 — BuyVM New York
- 2605:6400:10:aa9:1c0f:44d3:da15:c0ec — BuyVM New York
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https