My Network of Servers

I used to advertise my network of servers here to persuade people to pay for hosting.  I still maintain a number but not for commercial reasons anymore but mostly because I have gotten used to having access to them.

These are located in the UK, Germany and the US, with most of the traffic going to the ones in Germany and a backup one in New York called Queeg while everything is replicated in the UK.  I also used to have Shodan and Xerxes in Texas when I did more hosting.  I use 1and1 for hosting in Europe, JVDS for hosting in the united states and Goscomb Technologies for hosting in the UK.

I also use them as a networking testbed; site-to-site VPN's run between distant systems, RIP and IGMP keep the whole thing routing and the entire setup is like a giant real-world lab only with higher uptime.  There is also a full deployment of IPv6 in place both in my home and on all but one of the servers located in datacentres.  Hurricane Electric and Goscomb provide the upstream for my IPv6.

Latest Changes

Please use zeta.nullify.net and echo.nullify.net as nameservers for domains, Xname will provide more backup servers for free if needed. Xerxes.nullify.net is now on a new IP after a relocation from the states.  Zeta.nullify.net is now attached to a multihomed router with two IPv6 and two IPv4 connections.

• Delta.nullify.net (Secondary DNS/Web, Hyper-V) - Germany
• Alpha.nullify.net (Web server) - Germany
• Tau.nullify.net  (Communications/e-mail) - UK
• Chi.nullify.net (Hyper-V) - UK
• Zeta.nullify.net (Primary DNS - with IP's 93.89.94.50, 2a01:348:72:1::5 and 2001:470:91b8:1::5, Hyper-V) - UK
• Queeg.nullify.net (Secondary DNS - with IP 208.116.23.34 ) - US
• Vex.nullify.net (Secondary IPv6 DNS - 2001:470:91b8:1::2 or 2a01:348:72:1::2 ) - UK
• And the vm's (most used to be physical but I am consolidating):-
• Sigma.nullify.net (remote desktop services/misc server) - UK
• Lambda.nullify.net (RDP) - UK
• Echo.nullify.net (legacy server 2003 system) - Germany
• Xerxes.nullify.net (legacy server 2003 system)- German
• Beta.nullify.net (Communications/xmpp) - Germany
• The routers (uk-gw1.nullify.net, uk-gw2.nullify.net, de-gw1 and us-nyc-gw1) are either RB450G gigabit firewall/routers running RouterOS from Mikrotik (they are basically small Linux boxes with flash memory and hardware ASICS for routing/switching) or FreeBSD systems.

Backup DNS for my domains is provided by XName and Gandi, both of which I am very grateful for.

I use MS SQL Server replication to provide complete redundancy which takes the pressure off if anything does go wrong!  There's a maximum of about a minutes delay before the replicas are in sync and you can update from any location which is very helpful.

The X509 certificate authority used to sign all private SSL certificates and IPSEC connections in use on this network is here for you to install as a trusted root if you need to use encrypted services.

Using a NullifyNetwork Smartcard/Cryptomate key

If you have an SSH/SFTP, Remote Desktop or VPN account then you will possibly also have been given an ACS ACOS5 cryptographic smartcard in USB form factor, full size or a sim card.  If you need to, you can download the ACOS5 PKCS#11 Libraries and the CryptoAPI middleware DLL's (this file includes the drivers for the Cryptomate keys inbuilt reader but not the admin tools).

This card cannot be duplicated and if you lose it you should notify me personally so I can immediately revoke your certificate(s).  If you have stored other certificates on the same card you may need to contact other providers too.

You can buy replacement CryptoMate tokens (about £20) or additional cards (£7.50) from SmartcardFocus, please do not store your keys insecurely instead.