Infrastructure & Lab Environment

Current Fleet Topology & Environment State

Drift-Audited Infrastructure State

This document details the physical infrastructure and hardware inventory supporting the RPDevs architecture. State, network zoning, and hardware health are continuously monitored, validated, and normalized by the Infra Audit Engine into the authoritative CURRENT_ENV.yml registry.

The fleet operates across a decoupled Layer 2 network connecting bare-metal Linux compute hosts, edge AI accelerators, and a hardened OpenWrt perimeter gateway:

🖥️ Node: llmadmin01 (Primary Compute & AI)

The powerhouse of the lab, heavily accelerated for AI inference, telemetry processing, and centralized container management.

• Role: Linux Compute Node
• Hardware Accelerators:
  • NVIDIA Corporation GP107GLM [Quadro P600 Mobile]
  • Global Unichip Corp. Coral Edge TPU
  • Intel Corporation CoffeeLake-H GT2 [UHD Graphics 630]
• Storage Backbone: Samsung NVMe SSD Controller PM9C1a
• Memory Management: 32GB total with 16GB ZRAM block device (transparent compression)
• Container Engine: Docker via overlayfs (/var/lib/docker)

🖥️ Node: t430 (General Compute)

A secondary compute node handling distributed workloads and infrastructure redundancy.

• Role: Linux Compute Node
• Hardware Accelerators: Intel Corporation 3rd Gen Core processor Graphics Controller
• Memory Management: 8GB total with 4GB ZRAM block device
• Container Engine: Docker via overlayfs (/mnt/data/docker)

🌐 Node: edge (Perimeter Routing & Security)

The OpenWrt-powered border gateway. It strictly manages complex firewall zoning, VLANs, and edge telemetry.

• Role: OpenWrt Edge Router
• Core Capabilities:
  • Network Zoning: Strict firewall separation across lan, wan, iot, guest, secure, clients, servers, and docker zones.
  • DNS & Adblocking: Handled via dnsmasq intercepting all DNS traffic (DoT/UDP/TCP) and enforcing custom blocklists at the edge.
  • Edge Telemetry: Intrusion detection and automated banning via crowdsec (with a local bouncer) and collectd performance tracking.
  • Remote Access: Secure tunneling via cloudflared (Zero Trust) and Dropbear SSH.
  • Dynamic DNS & Certificates: Managed via local acme routines pushing wildcards across .internal.iamrp.dev and .iot.iamrp.dev.

---

📂 Explore the Architecture

Delve deeper into the specific design patterns running on top of this hardware:

• Hardware-Aware Storage Tiering: How IOPS-heavy workloads and volatile Honeypot logs are dynamically mapped to NVMe arrays or RAM disks to prevent flash-wear.
• Layer 2 Containerization & Networking: Deep dive into the macvlan/ipvlan topology that allows containers to act as first-class citizens on the physical network.

---

🔗 Related Architecture & Knowledge Graph

• Projects Directory: Return to the complete portfolio on Systems & Infrastructure Engineering Projects.
• Fleet Telemetry & Observability: Live monitoring in Unified Fleet Observability (Alloy) and Infra Audit Engine.
• Edge Routing & Storage: Explored in OpenWrt Kernel NFS Server and OpenWRT Blackhole Webserver.
• Governance Enforcement: Governed by Infrastructure Hardening Policy and Information Security Policy.
• Field Guides: Read practical edge routing patterns in Zero-Trust Edge Routing and Lessons from Bare-Metal Diagnostics.
• Master Credentials: Review systems engineering background on Curriculum Vitae & Master Resume.
• Digital Garden Hub: Return to the home Projects Index.