Architecture

Hardware, network, and service topology, drawn end to end.

Three views of the cluster, from the wall socket to the workload. Hostnames use the opi5cluster.co.uk domain is only available locally.

Hardware topology: A router with two NanoPi NEO3 DNS appliances on its LAN ports, a LAN switch carrying the seven wired cluster nodes, and a GitLab CI runner plus Raspberry Pi 3 backup target on the IOT Wi-Fi — Hardware topology: every machine on the LAN, in-cluster and out.

Service architecture: public visitors reach the Istio gateway through Cloudflare Tunnel, and LAN clients connect directly; Istio routes to platform, data, AI, media, and bot workloads — Service architecture: one edge, five workload groups.

DNS chain: LAN clients query two AdGuard Home appliances; dns02 cascades through dns01, which resolves via Quad9 and rewrites opi5cluster.co.uk names to the ingress IP — DNS chain: filtered, redundant, and independent of the cluster.