Implementation & Tooling #
Documents what each role runs and how it is configured β what Deevnet runs today, and what is under evaluation β organized by substrate architecture layer. Each page records what was chosen and why. The section opens with Hardware: the physical boxes, one page per model.
How to operate what is selected here is in the runbook; finished projects built on it are under Completed Projects.
Roles and what fills them #
The roles themselves β what each does, and where it sits in the network β are defined in Architecture. This section only says what fills them.
| Architecture role | Filled by | Page |
|---|---|---|
| Edge router | GL-iNet Slate AX, OpenWrt | Edge Router |
| Core router | ZimaBoard 832, OPNsense | Core Router |
| Access switch | TP-Link SG2218 | Access Switch |
| Wireless access | TP-Link EAP650-Outdoor | Wireless Access Point |
| Network management | Omada SDN Controller | Network Controllers |
| Builder | AOOSTAR N1 PRO, Fedora | Builder Node |
| Management hypervisor | Dell OptiPlex 7050 Micro, Proxmox VE | Management Hypervisor |
| Tenant hypervisor | Dell OptiPlex 7060 Micro, Proxmox VE | Tenant Hypervisors |
| Tenant fabric | Proxmox SDN, EVPN/VXLAN | Tenant Fabric |
| Pi lab | Raspberry Pi 4 | Raspberry Pi |
| Tenant DNS | PowerDNS Authoritative | Tenant DNS |
The software this site wrote for itself β the Deevnet API, the Terraform provider tenants use, and the runtime tools around them β is Deevnet Software. Everything else the management and control planes run β OpenBao, the MQTT broker, the log store, Grafana β is listed in the Software Catalog.
Scope #
This section answers the question:
“Why did we choose this, and under what conditions would we change it?”
Each role page documents:
| Section | Content |
|---|---|
| Role | One line naming the architecture role it fills, with a link |
| Hardware | A link to the model’s page under Hardware |
| Operating System | OS choice and automation capability |
| Product features in use | What the product does beyond the role, and the product-specific facts that cost time to discover |
It does not restate the role, and it holds no procedures: those are in the runbook.
Evaluations #
What each selection was checked against, by item: its current verdict, and every evaluation behind it, plus the candidates being considered. See Evaluations. Hardware in service is evaluated on its model’s Hardware page. The process and criteria are the Evaluation policy.
Software Catalog #
Every piece of software in use, with its version, license and support model, grouped by layer, including the services bundled inside OPNsense: see Software Catalog.
Technology Stack #
| Technology | Purpose |
|---|---|
| Ansible | Infrastructure provisioning |
| Terraform | Tenant interface β tenants declare themselves through the deevnet/deevnet provider |
| Packer | OS image builds |
| Fedora/RHEL | Primary OS (dnf-based, SELinux) |
| Proxmox VE | Virtualization platform |
| OPNsense | Router platform |
| VyOS | On hold (see Evaluations) |
| TP-Link Omada | Switch and AP management |