GrapheneOS servers
This is a detailed list of the public GrapheneOS servers.
We use hardened local machines for building and signing rather than servers outside our physical control, so information on that infrastructure is outside the scope of this page but may be provided in the future elsewhere.
GrapheneOS DNS servers
Specs:
- 11x Vultr vhp-1c-1gb-amd
- 1 core
- 1 GiB memory
- 25 GiB NVMe SSD storage
- 4x BuyVM Slice 1024
- 1 core
- 1 GiB memory
- 20 GiB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- ns1.attestation.app
- ns1.grapheneos.app
- ns1.grapheneos.ca
- ns1.grapheneos.com
- ns1.grapheneos.dev
- ns1.grapheneos.foundation
- ns1.grapheneos.info
- ns1.grapheneos.net
- ns1.grapheneos.network
- ns1.grapheneos.online
- ns1.grapheneos.org
- ns1.grapheneos.ovh
- ns1.grapheneos.page
- ns1.grapheneos.social
- ns1.seamlessupdate.app
- ns1.vanadium.app
- ns2.attestation.app
- ns2.grapheneos.app
- ns2.grapheneos.ca
- ns2.grapheneos.com
- ns2.grapheneos.dev
- ns2.grapheneos.foundation
- ns2.grapheneos.info
- ns2.grapheneos.net
- ns2.grapheneos.network
- ns2.grapheneos.online
- ns2.grapheneos.org
- ns2.grapheneos.ovh
- ns2.grapheneos.page
- ns2.grapheneos.social
- ns2.seamlessupdate.app
- ns2.vanadium.app
IPs:
- 23.149.124.1 (anycast), 65.20.91.33 (bom.ns1.grapheneos.org) — Vultr Mumbai
- 2602:f4d9::1 (anycast), 2401:c080:2400:1814:5400:05ff:fec5:d503 (bom.ns1.grapheneos.org) — Vultr Mumbai
- 23.149.124.1 (anycast), 80.240.20.200 (fra.ns1.grapheneos.org) — Vultr Frankfurt
- 2602:f4d9::1 (anycast), 2a05:f480:1800:2acd:5400:05ff:fec2:23a1 (fra.ns1.grapheneos.org) — Vultr Frankfurt
- 23.149.124.1 (anycast), 140.82.23.46 (lax.ns1.grapheneos.org) — Vultr Los Angeles
- 2602:f4d9::1 (anycast), 2001:19f0:6000:2dcd:5400:05ff:fec1:97db (lax.ns1.grapheneos.org) — Vultr Los Angeles
- 23.149.124.1 (anycast), 192.248.159.52 (lon.ns1.grapheneos.org) — Vultr London
- 2602:f4d9::1 (anycast), 2001:19f0:7400:8669:5400:05ff:fec3:f3f8 (lon.ns1.grapheneos.org) — Vultr London
- 23.149.124.1 (anycast), 45.32.173.220 (mia.ns1.grapheneos.org) — Vultr Miami
- 2602:f4d9::1 (anycast), 2001:19f0:9002:2981:5400:05ff:fec1:65c4 (mia.ns1.grapheneos.org) — Vultr Miami
- 23.149.124.1 (anycast), 66.135.8.22 (nyc.ns1.grapheneos.org) — Vultr New York City
- 2602:f4d9::1 (anycast), 2001:19f0:1000:c0d4:5400:05ff:fec1:7c21 (nyc.ns1.grapheneos.org) — Vultr New York City
- 23.149.124.1 (anycast), 216.238.118.134 (sao.ns1.grapheneos.org) — Vultr São Paulo
- 2602:f4d9::1 (anycast), 2001:19f0:b800:14a9:5400:05ff:feca:f136 (sao.ns1.grapheneos.org) — Vultr São Paulo
- 23.149.124.1 (anycast), 66.42.74.68 (sea.ns1.grapheneos.org) — Vultr Seattle
- 2602:f4d9::1 (anycast), 2001:19f0:8001:0438:5400:05ff:fec1:9dbd (sea.ns1.grapheneos.org) — Vultr Seattle
- 23.149.124.1 (anycast), 139.180.154.140 (sin.ns1.grapheneos.org) — Vultr Singapore
- 2602:f4d9::1 (anycast), 2401:c080:1400:4890:5400:05ff:fec2:23b0 (sin.ns1.grapheneos.org) — Vultr Singapore
- 23.149.124.1 (anycast), 45.63.28.82 (syd.ns1.grapheneos.org) — Vultr Sydney
- 2602:f4d9::1 (anycast), 2401:c080:1800:141d:5400:05ff:fec5:d41b (syd.ns1.grapheneos.org) — Vultr Sydney
- 23.149.124.1 (anycast), 66.42.42.15 (tyo.ns1.grapheneos.org) — Vultr Tokyo
- 2602:f4d9::1 (anycast), 2001:19f0:7001:5695:5400:05ff:fec4:e394 (tyo.ns1.grapheneos.org) — Vultr Tokyo
- 23.149.125.1 (anycast), 198.251.90.93 (fallback anycast), 107.189.3.168 (brn.ns2.grapheneos.org) — BuyVM Bern
- 2602:f4d9:1::1 (anycast), 2605:6400:30:ec25:102c:af6d:5be:1eb8 (brn.ns2.grapheneos.org) — BuyVM Bern
- 23.149.125.1 (anycast), 198.251.90.93 (fallback anycast), 205.185.124.155 (las.ns2.grapheneos.org) — BuyVM Las Vegas
- 2602:f4d9:1::1 (anycast), 2605:6400:20:1c8f:a0c9:372d:482e:945b (las.ns2.grapheneos.org) — BuyVM Las Vegas
- 23.149.125.1 (anycast), 198.251.90.93 (fallback anycast), 2605:6400:40:ffbd:14e7:d270:fd75:600c (mia.ns2.grapheneos.org) — BuyVM Miami
- 2602:f4d9:1::1 (anycast), 2605:6400:20:1c8f:a0c9:372d:482e:945b (mia.ns2.grapheneos.org) — BuyVM Miami
- 23.149.125.1 (anycast), 198.251.90.93 (fallback anycast), 198.98.53.141 (nyc.ns2.grapheneos.org) — BuyVM New York City
- 2602:f4d9:1::1 (anycast), 2605:6400:10:102e:95bc:89ef:2e7f:49bb (nyc.ns2.grapheneos.org) — BuyVM New York City
Ports:
- TCP 22 ssh
- TCP 53 domain
- UDP 53 domain
- TCP 80 http
- TCP 443 https
- TCP 853 domain-s
Staging GrapheneOS DNS server
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GiB memory
- 20 GiB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- ns1.staging.attestation.app
- ns2.staging.attestation.app
- ns1.staging.grapheneos.org
- ns2.staging.grapheneos.org
IPs:
- 198.98.56.238 — BuyVM New York City
- 2605:6400:10:c41:de92:c534:326a:711a — BuyVM New York City
Ports:
- TCP 22 ssh
- TCP 53 domain
- UDP 53 domain
- TCP 80 http
- TCP 443 https
- TCP 853 domain-s
GrapheneOS website and network services
These are the servers for our website, HTTP/HTTPS connectivity checks, HTTPS network time, NTP (for Qualcomm XTRA), Broadcom PSDS cache, Samsung PSDS cache, Qualcomm PSDS (XTRA) cache, SUPL proxy, attestation key provisioning proxy, Vanadium component update check/download proxy, network location proxy and geocoding proxy.
Specs:
- 4x BuyVM Slice 1024
- 1 core
- 1 GiB memory
- 20 GiB NVMe SSD storage
- 1000 Mbit/s bandwidth
- 4x Vultr vhp-1c-1gb-amd
- 1 core
- 1 GiB memory
- 25 GiB NVMe SSD storage
Domains:
- grapheneos.org
- www.grapheneos.org
- grapheneos.app
- www.grapheneos.app
- grapheneos.ca
- www.grapheneos.ca
- grapheneos.com
- www.grapheneos.com
- grapheneos.dev
- www.grapheneos.dev
- grapheneos.foundation
- www.grapheneos.foundation
- grapheneos.info
- www.grapheneos.info
- grapheneos.net
- www.grapheneos.net
- grapheneos.ovh
- www.grapheneos.ovh
- grapheneos.page
- www.grapheneos.page
- vanadium.app
- www.vanadium.app
- grapheneos.network - HTTP/HTTPS connectivity checks
- connectivitycheck.grapheneos.network - HTTP/HTTPS connectivity checks
- www.grapheneos.network
- grapheneos.online - HTTP/HTTPS connectivity checks
- connectivitycheck.grapheneos.online - HTTP/HTTPS connectivity checks
- www.grapheneos.online
- broadcom.psds.grapheneos.org - HTTPS Broadcom PSDS data cache
- samsung.psds.grapheneos.org - HTTPS Samsung PSDS data cache
- qualcomm.psds.grapheneos.org - HTTPS Qualcomm PSDS data cache
- remoteprovisioning.grapheneos.org - HTTPS reverse proxy to remoteprovisioning.google.com
- widevineprovisioning.grapheneos.org - HTTPS reverse proxy for Widevine provisioning
- time.grapheneos.org - HTTPS time server with millisecond precision X-Time header
- supl.grapheneos.org - TLS reverse proxy to supl.google.com
- nominatim.grapheneos.org - HTTPS reverse proxy to nominatim.openstreetmap.org, which will become our own instance of Nominatim instead of a proxy
- gs-loc.apple.grapheneos.org - HTTPS reverse proxy to Apple's network location service, which will remain an option after we have our own location service
- update.vanadium.app - HTTPS reverse proxy to update.googleapis.com for Chromium component updates (will be hosted directly in the future)
- dl.vanadium.app - HTTPS reverse proxy to CDNs for Chromium component updates (will be hosted directly in the future)
IPs:
- 107.189.14.16 (brn.grapheneos.org) — BuyVM Bern
- 2605:6400:30:fbfc:64d:dafb:d00a:5d19 (brn.grapheneos.org) — BuyVM Bern
- 209.141.37.35 (las.grapheneos.org) — BuyVM Las Vegas
- 2605:6400:20:387:72d4:dab9:a369:f351 (las.grapheneos.org) — BuyVM Las Vegas
- 45.61.186.223 (mia.grapheneos.org) — BuyVM Miami
- 2605:6400:40:ffb4:40e3:e5c8:9b96:614b (mia.grapheneos.org) — BuyVM Miami
- 198.98.62.94 (nyc.grapheneos.org) — BuyVM New York City
- 2605:6400:10:50:20a1:d9ea:5c10:a895 (nyc.grapheneos.org) — BuyVM New York City
- 216.238.116.202 (sao.grapheneos.org) — Vultr São Paulo
- 2001:19f0:b800:1f13:5400:05ff:fed0:8ea7 (sao.grapheneos.org) — Vultr São Paulo
- 45.32.230.4 (sea.grapheneos.org) — Vultr Seattle
- 2001:19f0:8000:3454:5400:05ff:fec8:4139 (sea.grapheneos.org) — Vultr Seattle
- 66.42.50.166 (sin.grapheneos.org) — Vultr Singapore
- 2001:19f0:4400:2c24:5400:05ff:fec7:4cdc (sin.grapheneos.org) — Vultr Singapore
- 107.191.57.135 (syd.grapheneos.org) — Vultr Sydney
- 2401:c080:1800:1c40:5400:05ff:fec7:c902 (syd.grapheneos.org) — Vultr Sydney
Ports:
- TCP 22 ssh
- TCP 80 http
- UDP 123 ntp
- TCP 443 https
- TCP 7275 supl
Staging GrapheneOS website and network services
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GiB memory
- 20 GiB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- staging.grapheneos.org
IPs:
- 199.195.250.78 — BuyVM New York City
- 2605:6400:10:9d6:6d84:e183:acda:16d7 — BuyVM New York City
Ports:
- TCP 22 ssh
- TCP 80 http
- UDP 123 ntp
- TCP 443 https
- TCP 7275 supl
GrapheneOS release servers
These are the static file servers for GrapheneOS releases and our app repository. These are used by the releases page and web installer along with the System Updater and App Store (app repository client) within the OS.
Specs:
- 2x ReliableSite dedicated server (sponsored by ReliableSite)
- Ryzen 9900X
- 192 GiB DDR5
- 2x 4 TB NVMe SSD storage
- 10000 Mbit/s bandwidth
- Xenyth dedicated server (sponsored by Xenyth)
- Xeon E5-2680 v4
- 128 GiB DDR4
- 2x 1 TB SATA SSD storage
- 10000 Mbit/s bandwidth
Domains:
- releases.grapheneos.org
- seamlessupdate.app
- www.seamlessupdate.app
- apps.grapheneos.org
IPs:
- 104.194.8.203 (lax.releases.grapheneos.org) — ReliableSite Los Angeles
- 2605:9880:200:20::113 (lax.releases.grapheneos.org) — ReliableSite Los Angeles
- 172.96.172.37 (mia.releases.grapheneos.org) — ReliableSite Miami
- 2605:9880:400:1100:15:1240:515:6e (mia.releases.grapheneos.org) — ReliableSite Miami
- 207.174.104.20 (yto.releases.grapheneos.org) — Xenyth Toronto
- 2602:fd50:1a1:20::2 (yto.releases.grapheneos.org) — Xenyth Toronto
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
Attestation website and service
Specs:
- netcup RS 1000 G12 Ultra
- 6 dedicated cores (EPYC 9645)
- 12 GiB memory
- 512 GiB NVMe SSD storage
- 2500 Mbit/s bandwidth
Domains:
- attestation.app
- www.attestation.app
IPs:
- 159.195.67.50 — netcup Nuremberg
- 2a0a:4cc0:c2:1cf3::1 — netcup Nuremberg
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
Staging attestation website and service
Specs:
- BuyVM Slice 1024
- 1 core
- 1 GiB memory
- 20 GiB NVMe SSD storage
- 1000 Mbit/s bandwidth
Domains:
- staging.attestation.app
IPs:
- 198.98.57.157 — BuyVM New York City
- 2605:6400:10:aa9:1c0f:44d3:da15:c0ec — BuyVM New York City
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS mail server
Specs:
- OVH VPS vps2023-le-2
- 2 core
- 2 GiB memory
- 40 GiB NVMe SSD storage
- 500 Mbit/s bandwidth
Domains:
- mail.grapheneos.net
- mail.grapheneos.org
- mta-sts.attestation.app
- mta-sts.discuss.grapheneos.org
- mta-sts.grapheneos.app
- mta-sts.grapheneos.ca
- mta-sts.grapheneos.com
- mta-sts.grapheneos.dev
- mta-sts.grapheneos.foundation
- mta-sts.grapheneos.info
- mta-sts.grapheneos.net
- mta-sts.grapheneos.network
- mta-sts.grapheneos.online
- mta-sts.grapheneos.org
- mta-sts.grapheneos.ovh
- mta-sts.grapheneos.page
- mta-sts.grapheneos.social
- mta-sts.mail.grapheneos.org
- mta-sts.matrix.grapheneos.org
- mta-sts.seamlessupdate.app
- mta-sts.vanadium.app
IPs:
- 192.99.98.22 — OVH bhs6
- 2607:5300:205:200::472f — OVH bhs6
Ports:
- TCP 22 ssh
- TCP 25 smtp
- TCP 80 http
- TCP 443 https
- TCP 465 submissions
- TCP 993 imaps
GrapheneOS discussion forum server
Specs:
- netcup RS 1000 G12 Ultra
- 6 dedicated cores (EPYC 9645)
- 12 GiB memory
- 512 GiB NVMe SSD storage
- 2500 Mbit/s bandwidth
Domains:
- discuss.grapheneos.org
IPs:
- 152.53.168.153 — netcup Manassas
- 2a0a:4cc0:2000:aa27::1 — netcup Manassas
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https
GrapheneOS Matrix server
This server primarily runs the synapse Matrix server with PostgreSQL behind an nginx web server. It also runs the mjolnir bot for moderation and matterbridge is used to implement a bridge between Discord, Matrix and Telegram.
Specs:
- netcup RS 2000 G12 Ultra
- 10 dedicated cores (EPYC 9645)
- 24 GiB memory
- 1 TiB NVMe SSD storage
- 2500 Mbit/s bandwidth
Domains:
- matrix.grapheneos.org
- element.grapheneos.org
IPs:
- 152.53.39.88 — netcup Manassas
- 2a0a:4cc0:2000:dbc::1 — netcup Manassas
Ports:
- TCP 22 ssh
- TCP 80 http
- TCP 443 https