- E2E, ALL_VMIDS, operator checklist, RPC_ENDPOINTS_MASTER, DNS/NPM architecture - PROXMOX deployment template: the-order wired via 10210 - Placeholders master + r630-02 incomplete summary for 10210 - CT 10210: chown /var/cache on host idmap (mandb clean) — applied on cluster Made-with: Cursor
29 KiB
Complete VMID and Endpoints Reference
Last Updated: 2026-03-26
Document Version: 1.2
Status: Active Documentation — Master (source of truth) for VMID, IP, port, and domain mapping. See MASTER_DOCUMENTATION_INDEX.md.
Operational template (hosts, peering, deployment gates, JSON): ../03-deployment/PROXMOX_VE_OPERATIONAL_DEPLOYMENT_TEMPLATE.md · config/proxmox-operational-template.json
Date: 2026-01-20
Status: Current Active Configuration (Verified)
Last Updated: 2026-01-20
Verification Status: ✅ Complete - All VMIDs verified across 3 hosts
Quick Summary
- Total VMIDs: 50+ (excluding deprecated Cloudflared)
- Running: 45+
- Stopped: 5
- Infrastructure Services: 10
- Blockchain Nodes: 22 (Validators: 5, Sentries: 4, RPC: 13)
- Application Services: 22
Infrastructure Services
Proxmox Infrastructure (r630-02)
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 100 | 192.168.11.32 | proxmox-mail-gateway | ✅ Running | SMTP: 25, 587, 465 | Email gateway |
| 101 | 192.168.11.33 | proxmox-datacenter-manager | ✅ Running | Web: 8006 | Datacenter management |
| 103 | 192.168.11.30 | omada | ✅ Running | Web: 8043 | Omada controller |
| 104 | 192.168.11.31 | gitea | ✅ Running | Web: 80, 443 | Git repository |
| 105 | 192.168.11.26 | nginxproxymanager | ✅ Running | Web: 80, 81, 443 | Nginx Proxy Manager (legacy) |
| 130 | 192.168.11.27 | monitoring-1 | ✅ Running | Web: 80, 443 | Monitoring services |
NPMplus (r630-01 / r630-02)
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 10233 | 192.168.11.167 | npmplus | ✅ Running | Web: 80, 81, 443 | NPMplus reverse proxy |
| 10234 | 192.168.11.168 | npmplus-secondary | ✅ Running | Web: 80, 81, 443 | NPMplus secondary (HA); restarted 2026-02-03 |
Note: NPMplus primary is on VLAN 11 (192.168.11.167). Secondary NPMplus instance on r630-02 for HA configuration.
Operational note (2026-03-26): if 192.168.11.167:81 accepts TCP but hangs without returning HTTP, CT 10233 may be wedged even when networking looks healthy. Rebooting it from r630-01 with pct reboot 10233 restored the expected 301 on port 81 and unblocked the API updater.
RPC Translator Supporting Services
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 106 | 192.168.11.110 | redis-rpc-translator | ✅ Running | Redis: 6379 | Distributed nonce management |
| 107 | 192.168.11.111 | web3signer-rpc-translator | ✅ Running | Web3Signer: 9000 | Transaction signing |
| 108 | 192.168.11.112 | vault-rpc-translator | ✅ Running | Vault: 8200 | Secrets management |
Blockchain Nodes - Validators (ChainID 138)
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 1000 | 192.168.11.100 | besu-validator-1 | ✅ Running | P2P: 30303, Metrics: 9545 | Validator node 1 |
| 1001 | 192.168.11.101 | besu-validator-2 | ✅ Running | P2P: 30303, Metrics: 9545 | Validator node 2 |
| 1002 | 192.168.11.102 | besu-validator-3 | ✅ Running | P2P: 30303, Metrics: 9545 | Validator node 3 |
| 1003 | 192.168.11.103 | besu-validator-4 | ✅ Running | P2P: 30303, Metrics: 9545 | Validator node 4 |
| 1004 | 192.168.11.104 | besu-validator-5 | ✅ Running | P2P: 30303, Metrics: 9545 | Validator node 5 |
Blockchain Nodes - Sentries (ChainID 138)
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 1500 | 192.168.11.150 | besu-sentry-1 | ✅ Running | P2P: 30303, Metrics: 9545 | Sentry node 1 |
| 1501 | 192.168.11.151 | besu-sentry-2 | ✅ Running | P2P: 30303, Metrics: 9545 | Sentry node 2 |
| 1502 | 192.168.11.152 | besu-sentry-3 | ✅ Running | P2P: 30303, Metrics: 9545 | Sentry node 3 |
| 1503 | 192.168.11.153 | besu-sentry-4 | ✅ Running | P2P: 30303, Metrics: 9545 | Sentry node 4 |
| 1504 | 192.168.11.154 | besu-sentry-ali | ✅ Running | P2P: 30303, Metrics: 9545 | Sentry node (Ali) |
| 1505 | 192.168.11.213 | besu-sentry-alltra-1 | ✅ Running | P2P: 30303, Metrics: 9545 | Sentry (Alltra 1) |
| 1506 | 192.168.11.214 | besu-sentry-alltra-2 | ✅ Running | P2P: 30303, Metrics: 9545 | Sentry (Alltra 2) |
Note: 1505-1506 moved from .170/.171 to .213/.214 (2026-02-01) to free CCIP Ops interim range.
RPC Nodes - NEW VMID Structure (ChainID 138)
Migration Status: ✅ Complete (2026-01-18)
All RPC nodes have been migrated to a new VMID structure for better organization.
Core RPC Nodes
| VMID | IP Address | Hostname | Status | Block | Peers | Endpoints | Purpose |
|---|---|---|---|---|---|---|---|
| 2101 | 192.168.11.211 | besu-rpc-core-1 | ✅ Running | 1,145,367 | 7 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | Core RPC node |
| 2201 | 192.168.11.221 | besu-rpc-public-1 | ✅ Running | 1,145,367 | 7 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | Public RPC node (FIXED PERMANENT) |
| 2301 | 192.168.11.232 | besu-rpc-private-1 | ⏸️ Stopped | - | - | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | Private RPC node (startup error) |
Named RPC Nodes (Ali/Luis/Putu)
| VMID | IP Address | Hostname | Status | Block | Peers | Endpoints | Purpose |
|---|---|---|---|---|---|---|---|
| 2303 | 192.168.11.233 | besu-rpc-ali-0x8a | ✅ Running | 1,145,367 | 7 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | Ali RPC (0x8a identity) |
| 2304 | 192.168.11.234 | besu-rpc-ali-0x1 | ✅ Running | 1,145,367 | 7 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | Ali RPC (0x1 identity) |
| 2305 | 192.168.11.235 | besu-rpc-luis-0x8a | ✅ Running | 1,145,367 | 7 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | Luis RPC (0x8a identity) |
| 2306 | 192.168.11.236 | besu-rpc-luis-0x1 | ✅ Running | 1,145,367 | 7 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | Luis RPC (0x1 identity) |
| 2307 | 192.168.11.237 | besu-rpc-putu-0x8a | ✅ Running | 1,145,367 | 7 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | Putu RPC (0x8a identity) |
| 2308 | 192.168.11.238 | besu-rpc-putu-0x1 | ✅ Running | 1,145,367 | 7 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | Putu RPC (0x1 identity) |
ThirdWeb RPC Nodes
| VMID | IP Address | Hostname | Status | Block | Peers | Endpoints | Purpose |
|---|---|---|---|---|---|---|---|
| 2400 | 192.168.11.240 | thirdweb-rpc-1 | ✅ Running | 1,149,992 | 2 | Nginx: 443, Besu: 8545/8546, P2P: 30303, Metrics: 9545, Translator: 9645/9646 | ThirdWeb RPC with translator (primary) |
| 2401 | 192.168.11.241 | besu-rpc-thirdweb-0x8a-1 | ✅ Running | 1,149,992 | 2 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | ThirdWeb RPC instance 1 |
| 2402 | 192.168.11.242 | besu-rpc-thirdweb-0x8a-2 | ✅ Running | 1,149,992 | 2 | Besu: 8545/8546, P2P: 30303, Metrics: 9545 | ThirdWeb RPC instance 2 |
| 2403 | 192.168.11.243 | besu-rpc-thirdweb-0x8a-3 | ✅ Running | 600,172 | 0 | Besu: 8545/8546, P2P: 30303 | ThirdWeb RPC instance 3 (syncing) |
Note: VMID 2400 is the primary ThirdWeb RPC with Nginx and RPC Translator. VMID 2403 metrics disabled due to port conflict, node is syncing.
Public Domain: rpc.public-0138.defi-oracle.io → Routes to VMID 2400:443
OLD RPC Nodes (Decommissioned)
Status: ✅ DECOMMISSIONED (2026-01-18)
The following VMIDs have been permanently removed:
| VMID | Old IP Address | Old Hostname | Status | Replaced By |
|---|---|---|---|---|
| 2500 | 192.168.11.250 | besu-rpc-1 | 🗑️ Destroyed | VMID 2101 |
| 2501 | 192.168.11.251 | besu-rpc-2 | 🗑️ Destroyed | VMID 2201 |
| 2502 | 192.168.11.252 | besu-rpc-3 | 🗑️ Destroyed | VMID 2301 |
| 2503 | 192.168.11.253 | besu-rpc-ali-0x8a | 🗑️ Destroyed | VMID 2303 |
| 2504 | 192.168.11.254 | besu-rpc-ali-0x1 | 🗑️ Destroyed | VMID 2304 |
| 2505 | 192.168.11.201 | besu-rpc-luis-0x8a | 🗑️ Destroyed | VMID 2305 |
| 2506 | 192.168.11.202 | besu-rpc-luis-0x1 | 🗑️ Destroyed | VMID 2306 |
| 2507 | 192.168.11.203 | besu-rpc-putu-0x8a | 🗑️ Destroyed | VMID 2307 |
| 2508 | 192.168.11.204 | besu-rpc-putu-0x1 | 🗑️ Destroyed | VMID 2308 |
Public Domains (need updating to new IPs):
rpc-http-prv.d-bis.org→ Should route to new RPC nodesrpc-ws-prv.d-bis.org→ Should route to new RPC nodesrpc-http-pub.d-bis.org→ Should route to new RPC nodesrpc-ws-pub.d-bis.org→ Should route to new RPC nodesrpc.public-0138.defi-oracle.io→ Should route to 2401-2403
Application Services
Blockchain Explorer
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 5000 | 192.168.11.140 | blockscout-1 | ✅ Running | Web: 80, 443; API: 4000 | Blockchain explorer |
Public Domain: explorer.d-bis.org → Routes to VMID 5000:80 (nginx serves web UI, proxies /api/* to port 4000)
Firefly
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 6200 | 192.168.11.35 | firefly-1 | ✅ Running | Web: 80, 443, API: 5000 | Firefly DLT platform |
| 6201 | 192.168.11.57 | firefly-ali-1 | ✅ Running | Web: 80, 443, API: 5000 | Firefly (Ali instance) |
Note: Firefly instances run on r630-02. VMID 6200 also on r630-02.
Hyperledger Fabric
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 6000 | 192.168.11.65 | fabric-1 | ✅ Running | Peer: 7051, Orderer: 7050 | Hyperledger Fabric network |
Hyperledger Indy
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 6400 | 192.168.11.64 | indy-1 | ✅ Running | Indy: 9701-9708 | Hyperledger Indy network |
DBIS Core Services
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 10100 | 192.168.11.105 | dbis-postgres-primary | ✅ Running | PostgreSQL: 5432 | Primary database |
| 10101 | 192.168.11.106 | dbis-postgres-replica-1 | ✅ Running | PostgreSQL: 5432 | Database replica |
| 10120 | 192.168.11.125 | dbis-redis | ✅ Running | Redis: 6379 | Cache layer |
| 10130 | 192.168.11.130 | dbis-frontend | ✅ Running | Web: 80, 443 | Frontend admin console |
| 10150 | 192.168.11.155 | dbis-api-primary | ✅ Running | API: 3000 | Primary API server |
| 10151 | 192.168.11.156 | dbis-api-secondary | ✅ Running | API: 3000 | Secondary API server |
Public Domains:
dbis-admin.d-bis.org→ Routes to VMID 10130:80secure.d-bis.org→ Routes to VMID 10130:80dbis-api.d-bis.org→ Routes to VMID 10150:3000dbis-api-2.d-bis.org→ Routes to VMID 10151:3000
Miracles In Motion (MIM4U)
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 7810 | 192.168.11.37 | mim-web-1 | ✅ Running | Web: 80, 443 | MIM4U web frontend |
| 7811 | 192.168.11.36 | mim-api-1 | ✅ Running | Web: 80, 443, API: Various | MIM4U service (web + API) |
Public Domains (NPMplus config):
mim4u.org→ Routes tohttp://192.168.11.37:80(VMID 7810 mim-web-1)www.mim4u.org→ Routes tohttp://192.168.11.37:80(VMID 7810; optional NPMplus redirect www → apex)secure.mim4u.org→ Routes tohttp://192.168.11.37:80(VMID 7810)training.mim4u.org→ Routes tohttp://192.168.11.37:80(VMID 7810)
Note: All MIM4U domains route to VMID 7810 (mim-web-1) at 192.168.11.37. nginx on 7810 proxies /api/ to VMID 7811 (192.168.11.36:3001).
Sankofa Phoenix Services
Status: ✅ DEPLOYED AND OPERATIONAL (2026-01-20)
Verified Deployed Services:
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 7800 | 192.168.11.50 | sankofa-api-1 | ✅ Running | GraphQL: 4000, Health: /health | Phoenix API (Cloud Platform Portal) |
| 7801 | 192.168.11.51 | sankofa-portal-1 | ✅ Running | Web: 3000 | Sankofa Portal (Company Website) |
| 7802 | 192.168.11.52 | sankofa-keycloak-1 | ✅ Running | Keycloak: 8080, Admin: /admin | Identity and Access Management |
| 7803 | 192.168.11.53 | sankofa-postgres-1 | ✅ Running | PostgreSQL: 5432 | Database Service |
| 7804 | 192.168.11.54 | (Gov Portals dev) | ✅ Running | Web: 80 | Gov Portals — DBIS, ICCC, OMNL, XOM (*.xom-dev.phoenix.sankofa.nexus) |
| 7805 | 192.168.11.72 | sankofa-studio | — | API: 8000 | Sankofa Studio (FusionAI Creator) — studio.sankofa.nexus (IP .72; .55 = VMID 10230 order-vault) |
Public Domains (NPMplus routing):
sankofa.nexus→ Routes tohttp://192.168.11.51:3000(Sankofa Portal/VMID 7801) ✅www.sankofa.nexus→ Same upstream as apex; NPMadvanced_configissues 301 tohttps://sankofa.nexus(preserve path/query via$request_uri). ✅phoenix.sankofa.nexus→ Routes tohttp://192.168.11.50:4000(Phoenix API/VMID 7800) ✅www.phoenix.sankofa.nexus→ Same upstream; 301 tohttps://phoenix.sankofa.nexus. ✅the-order.sankofa.nexus/www.the-order.sankofa.nexus→ OSJ management portal (secure auth). App source: the_order at~/projects/the_order. NPMplus default upstream: order-haproxyhttp://192.168.11.39:80(VMID 10210), which proxies to Sankofa portalhttp://192.168.11.51:3000(7801). Fallback: setTHE_ORDER_UPSTREAM_IP/THE_ORDER_UPSTREAM_PORTto.51/3000if HAProxy is offline.www.the-order.sankofa.nexus→ 301https://the-order.sankofa.nexus(same aswww.sankofa/www.phoenix).studio.sankofa.nexus→ Routes tohttp://192.168.11.72:8000(Sankofa Studio / VMID 7805)
Public verification evidence (2026-03-26): bash scripts/verify/verify-end-to-end-routing.sh --profile=public passed with Failed: 0; Sankofa root, Phoenix, Studio, and The Order returned 200. See verification_report.md.
Service Details:
- Host: r630-01 (192.168.11.11)
- Network: VLAN 11 (192.168.11.0/24)
- Gateway: 192.168.11.1
- All services verified and operational
Note: Sankofa services are deployed on VLAN 11 (192.168.11.x) as intended. All services are running and accessible.
The Order — microservices (r630-01)
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 10030 | 192.168.11.40 | order-identity | ✅ Running | API | Identity |
| 10040 | 192.168.11.41 | order-intake | ✅ Running | API | Intake |
| 10050 | 192.168.11.49 | order-finance | ✅ Running | API | Finance |
| 10060 | 192.168.11.42 | order-dataroom | ✅ Running | Web: 80 | Dataroom |
| 10070 | 192.168.11.87 | order-legal | ✅ Running | API | Legal — use IP_ORDER_LEGAL (.87); not .54 |
| 10080 | 192.168.11.43 | order-eresidency | ✅ Running | API | eResidency |
| 10090 | 192.168.11.36 | order-portal-public | ✅ Running | Web | Public portal |
| 10091 | 192.168.11.35 | order-portal-internal | ✅ Running | Web | Internal portal |
| 10092 | 192.168.11.37 | order-mcp-legal | ✅ Running | API | MCP legal |
| 10200 | 192.168.11.46 | order-prometheus | ✅ Running | 9090 | Metrics (IP_ORDER_PROMETHEUS; not Order Redis) |
| 10201 | 192.168.11.47 | order-grafana | ✅ Running | 3000 | Dashboards |
| 10202 | 192.168.11.48 | order-opensearch | ✅ Running | 9200 | Search |
| 10210 | 192.168.11.39 | order-haproxy | ✅ Running | 80 (HAProxy → portal :3000) | Edge for the-order.sankofa.nexus; HAProxy config via config/haproxy/order-haproxy-10210.cfg.template + scripts/deployment/provision-order-haproxy-10210.sh |
Gov portals vs Order: VMID 7804 alone uses 192.168.11.54 (IP_GOV_PORTALS_DEV). Order-legal must not use .54.
Phoenix Vault Cluster (8640-8642)
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 8640 | 192.168.11.200 | vault-phoenix-1 | ✅ Running | Vault: 8200 | Phoenix Vault node 1 |
| 8641 | 192.168.11.215 | vault-phoenix-2 | ✅ Running | Vault: 8200 | Phoenix Vault node 2 |
| 8642 | 192.168.11.202 | vault-phoenix-3 | ✅ Running | Vault: 8200 | Phoenix Vault node 3 |
Note: 8641 moved from .201 to .215 (2026-02-01) to free CCIP Execute interim range. See IP_CONFLICTS_CCIP_RANGE_RESOLVED_20260201.md.
Other Services
| VMID | IP Address | Hostname | Status | Endpoints | Purpose | Notes |
|---|---|---|---|---|---|---|
| 5800 | 192.168.11.85 | (Mifos) | ✅ Running | Web: 80 | Mifos X + Fineract (OMNL) | LXC on r630-02; mifos.d-bis.org; see MIFOS_R630_02_DEPLOYMENT.md |
| 5801 | 192.168.11.58 | dapp-smom | — | Web: 80 | DApp (frontend-dapp) for Chain 138 bridge | LXC; see DAPP_LXC_DEPLOYMENT.md; NPMplus/tunnel dapp.d-bis.org |
| 10232 | 192.168.11.56 | CT10232 | ✅ Running | Various | Container service | ✅ IP CONFLICT RESOLVED |
| 10234 | 192.168.11.168 | npmplus-secondary | ⏸️ Stopped | Web: 80, 81, 443 | NPMplus secondary (HA) | On r630-02 |
Oracle & Monitoring
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 3500 | 192.168.11.29 | oracle-publisher-1 | ✅ Running | Oracle: Various | Oracle publisher service |
| 3501 | 192.168.11.28 | ccip-monitor-1 | ✅ Running | Monitor: Various | CCIP monitoring service |
| 5200 | 192.168.11.80 | cacti-1 | ✅ Running | Web: 80, 443 | Network monitoring (Cacti); host r630-02 (migrated 2026-02-15) |
Machine Learning Nodes
| VMID | IP Address | Hostname | Status | Endpoints | Purpose |
|---|---|---|---|---|---|
| 3000 | 192.168.11.60 | ml110 | ✅ Running | ML Services: Various | ML node 1 |
| 3001 | 192.168.11.61 | ml110 | ✅ Running | ML Services: Various | ML node 2 |
| 3002 | 192.168.11.62 | ml110 | ✅ Running | ML Services: Various | ML node 3 |
| 3003 | 192.168.11.63 | ml110 | ✅ Running | ML Services: Various | ML node 4 |
Port Reference
Standard Besu Ports
- 8545: HTTP JSON-RPC
- 8546: WebSocket JSON-RPC
- 30303: P2P networking (TCP/UDP)
- 9545: Prometheus metrics
Standard Application Ports
- 80: HTTP
- 443: HTTPS
- 3000: Node.js API
- 5432: PostgreSQL
- 6379: Redis
- 9000: Web3Signer
- 8200: Vault
Network Architecture
Public Internet Access Flow
Internet
↓
Cloudflare (DNS + DDoS Protection)
↓
NPMplus (VMID 10233: 192.168.0.166:443)
↓
VM Nginx (443) → Backend Services
Internal RPC Access
Internal Network (192.168.11.0/24)
↓
Direct to RPC Nodes:
- VMID 2101: 192.168.11.211:8545 (HTTP) / 8546 (WS) - Core RPC
- VMID 2201: 192.168.11.221:8545 (HTTP) / 8546 (WS) - Public RPC
- VMID 2303: 192.168.11.233:8545 (HTTP) / 8546 (WS) - Ali 0x8a
- VMID 2304: 192.168.11.234:8545 (HTTP) / 8546 (WS) - Ali 0x1
- VMID 2305: 192.168.11.235:8545 (HTTP) / 8546 (WS) - Luis 0x8a
- VMID 2306: 192.168.11.236:8545 (HTTP) / 8546 (WS) - Luis 0x1
- VMID 2307: 192.168.11.237:8545 (HTTP) / 8546 (WS) - Putu 0x8a
- VMID 2308: 192.168.11.238:8545 (HTTP) / 8546 (WS) - Putu 0x1
- VMID 2400: 192.168.11.240:8545 (HTTP) / 8546 (WS) - ThirdWeb Primary
- VMID 2401: 192.168.11.241:8545 (HTTP) / 8546 (WS) - ThirdWeb 1
- VMID 2402: 192.168.11.242:8545 (HTTP) / 8546 (WS) - ThirdWeb 2
- VMID 2403: 192.168.11.243:8545 (HTTP) / 8546 (WS) - ThirdWeb 3
Known Issues & Notes
✅ IP Address Conflicts - RESOLVED
Status: ✅ RESOLVED - All conflicts fixed (2026-01-20)
-
192.168.11.50: ✅ RESOLVED
- VMID 7800 (sankofa-api-1): 192.168.11.50 ✅ UNIQUE
- VMID 10070 (order-legal): 192.168.11.87 (
IP_ORDER_LEGAL) — moved off .54 2026-03-25 (ARP conflict with VMID 7804 gov-portals) ✅
-
192.168.11.51: ✅ RESOLVED
- VMID 7801 (sankofa-portal-1): 192.168.11.51 ✅ UNIQUE
- VMID 10230 (order-vault): Reassigned to 192.168.11.55 ✅
-
192.168.11.52: ✅ RESOLVED
- VMID 7802 (sankofa-keycloak-1): 192.168.11.52 ✅ UNIQUE
- VMID 10232 (CT10232): Reassigned to 192.168.11.56 ✅
-
192.168.11.55: ✅ IN USE — VMID 10230 (order-vault) only. Sankofa Studio (VMID 7805) uses 192.168.11.72 to avoid conflict.
Resolution: All IP conflicts resolved using scripts/resolve-ip-conflicts.sh
Verification: ✅ All IPs verified unique, all services operational
IP conflicts (canonical): reports/status/IP_CONFLICTS_RESOLUTION_COMPLETE.md; CCIP range move: reports/status/IP_CONFLICTS_CCIP_RANGE_RESOLVED_20260201.md. Script: scripts/resolve-ip-conflicts.sh (uses config/ip-addresses.conf).
Port Conflicts
- VMID 2400: Port conflict resolved ✅
- Previous: Besu metrics (9545) conflicted with RPC Translator HTTP (9545)
- Resolution: Translator moved to 9645/9646 (completed)
- Current: Nginx routes to translator on 9645/9646
NPMplus Routing Issues
rpc.public-0138.defi-oracle.io: Currently routes to wrong VMID- Current:
https://192.168.11.252:443(VMID 2502 - decommissioned) - Should be:
https://192.168.11.240:443(VMID 2400) - Fix: Update NPMplus proxy host configuration
- Current:
Quick Access Commands
Test RPC Endpoints
# Public RPC (HTTP)
curl -X POST https://rpc-http-pub.d-bis.org \
-H 'Content-Type: application/json' \
-d '{"jsonrpc":"2.0","method":"eth_chainId","params":[],"id":1}'
# Private RPC (HTTP) - requires JWT
curl -X POST https://rpc-http-prv.d-bis.org \
-H 'Content-Type: application/json' \
-H 'Authorization: Bearer <JWT_TOKEN>' \
-d '{"jsonrpc":"2.0","method":"eth_chainId","params":[],"id":1}'
# ThirdWeb RPC
curl -X POST https://rpc.public-0138.defi-oracle.io \
-H 'Content-Type: application/json' \
-d '{"jsonrpc":"2.0","method":"eth_chainId","params":[],"id":1}'
Check Container Status
# From Proxmox host
pct status <VMID>
qm status <VMID>
# Check specific service
pct exec <VMID> -- systemctl status <service-name>
Related Documentation
- VMID IP List:
reports/VMID_IP_ADDRESS_LIST.md - NPMplus Setup:
docs/04-configuration/NPMPLUS_COMPLETE_SETUP_SUMMARY.md - Nginx Configurations:
docs/04-configuration/NGINX_CONFIGURATIONS_VMIDS_2400-2508.md - RPC Translator:
rpc-translator-138/VMID_ALLOCATION.md
NPMplus Endpoint Configuration Reference
This section lists all endpoints that should be configured in NPMplus, extracted from NPM (VMID 105) configuration files.
Complete NPMplus Domain Mapping
| Domain | Target | Scheme | Port | WebSocket | Notes |
|---|---|---|---|---|---|
| RPC Services | |||||
rpc.public-0138.defi-oracle.io |
192.168.11.240 |
https |
443 |
✅ Yes | ThirdWeb RPC (VMID 2400) |
rpc-http-pub.d-bis.org |
192.168.11.221 |
https |
443 |
✅ Yes | Public RPC (VMID 2201) |
rpc-ws-pub.d-bis.org |
192.168.11.221 |
https |
443 |
✅ Yes | Public WebSocket RPC (VMID 2201) |
rpc-http-prv.d-bis.org |
192.168.11.211 |
https |
443 |
✅ Yes | Private RPC with JWT (VMID 2101) |
rpc-ws-prv.d-bis.org |
192.168.11.211 |
https |
443 |
✅ Yes | Private WebSocket RPC with JWT (VMID 2101) |
| Explorer | |||||
explorer.d-bis.org |
192.168.11.140 |
http |
4000 |
❌ No | Blockchain Explorer (VMID 5000 - Direct Route) |
| DBIS Services | |||||
dbis-admin.d-bis.org |
192.168.11.130 |
http |
80 |
❌ No | DBIS Admin Frontend (VMID 10130) |
dbis-api.d-bis.org |
192.168.11.155 |
http |
3000 |
❌ No | DBIS API Primary (VMID 10150) |
dbis-api-2.d-bis.org |
192.168.11.156 |
http |
3000 |
❌ No | DBIS API Secondary (VMID 10151) |
secure.d-bis.org |
192.168.11.130 |
http |
80 |
❌ No | DBIS Secure Portal (VMID 10130) - Path-based routing |
| MIM4U Services | |||||
mim4u.org |
192.168.11.37 |
http |
80 |
❌ No | MIM4U Main Site (VMID 7810 mim-web-1) |
www.mim4u.org |
192.168.11.37 |
http |
80 |
❌ No | MIM4U (VMID 7810; optional redirect www → apex) |
secure.mim4u.org |
192.168.11.37 |
http |
80 |
❌ No | MIM4U Secure Portal (VMID 7810) |
training.mim4u.org |
192.168.11.37 |
http |
80 |
❌ No | MIM4U Training Portal (VMID 7810) |
| Sankofa Phoenix Services | |||||
sankofa.nexus |
192.168.11.51 |
http |
3000 |
❌ No | Sankofa Portal - Company Website (VMID 7801) ✅ Deployed |
www.sankofa.nexus |
192.168.11.51 |
http |
3000 |
❌ No | Sankofa Portal (VMID 7801) ✅ Deployed |
phoenix.sankofa.nexus |
192.168.11.50 |
http |
4000 |
❌ No | Phoenix API - Cloud Platform Portal (VMID 7800) ✅ Deployed |
www.phoenix.sankofa.nexus |
192.168.11.50 |
http |
4000 |
❌ No | Phoenix API (VMID 7800) ✅ Deployed |
the-order.sankofa.nexus, www.the-order.sankofa.nexus |
192.168.11.39 (10210 HAProxy; default) or 192.168.11.51 (direct portal if env override) |
http |
80 or 3000 |
❌ No | NPM → .39:80 by default; HAProxy → .51:3000 |
studio.sankofa.nexus |
192.168.11.72 |
http |
8000 |
❌ No | Sankofa Studio (FusionAI Creator) — VMID 7805 |
Path-Based Routing Notes
Some domains use path-based routing in NPM configs:
secure.d-bis.org:
/admin→http://192.168.11.130:80(DBIS Frontend)/api→http://192.168.11.155:3000(DBIS API)/graph→http://192.168.11.155:3000(DBIS GraphQL)/→http://192.168.11.130:80(DBIS Frontend)
sankofa.nexus (per deploy script):
/api→http://10.160.0.10:4000(Sankofa API)/→http://10.160.0.11:3000(Sankofa Portal)
Note: NPMplus may need custom location blocks or separate proxy hosts for path-based routing.
NPMplus routing (authoritative targets)
Use this document as the source of truth for domain → VMID:port. Only explorer.d-bis.org should point to Blockscout (VMID 5000, 192.168.11.140). All other domains must point to their correct VMID and port:
| Domain | Correct target (VMID, IP:port) | Do NOT point to |
|---|---|---|
explorer.d-bis.org |
5000, 192.168.11.140:80 (web), :4000 (API) | — |
sankofa.nexus, www.sankofa.nexus |
7801, 192.168.11.51:3000 | 192.168.11.140 (Blockscout) |
phoenix.sankofa.nexus, www.phoenix.sankofa.nexus |
7800, 192.168.11.50:4000 | 192.168.11.140 (Blockscout) |
the-order.sankofa.nexus, www.the-order.sankofa.nexus |
10210, 192.168.11.39:80 | 192.168.11.140 (Blockscout) |
studio.sankofa.nexus |
7805, 192.168.11.72:8000 | — |
If NPMplus proxy hosts for sankofa.nexus or phoenix.sankofa.nexus currently point to 192.168.11.140, update them to the correct IP:port above. See RPC_ENDPOINTS_MASTER.md and table "Sankofa Phoenix Services" in this document.
Note: All www.* subdomains redirect to their parent domains to reduce the number of proxy host configurations needed.
Last Updated: 2026-03-27
Maintained By: Infrastructure Team
RPC Node Quick Reference
Active RPC Endpoints (12/13 Running)
| IP Address | VMID | Name | Status |
|---|---|---|---|
| 192.168.11.211 | 2101 | besu-rpc-core-1 | ✅ Running |
| 192.168.11.221 | 2201 | besu-rpc-public-1 | ✅ Running |
| 192.168.11.232 | 2301 | besu-rpc-private-1 | ⏸️ Stopped |
| 192.168.11.233 | 2303 | besu-rpc-ali-0x8a | ✅ Running |
| 192.168.11.234 | 2304 | besu-rpc-ali-0x1 | ✅ Running |
| 192.168.11.235 | 2305 | besu-rpc-luis-0x8a | ✅ Running |
| 192.168.11.236 | 2306 | besu-rpc-luis-0x1 | ✅ Running |
| 192.168.11.237 | 2307 | besu-rpc-putu-0x8a | ✅ Running |
| 192.168.11.238 | 2308 | besu-rpc-putu-0x1 | ✅ Running |
| 192.168.11.240 | 2400 | thirdweb-rpc-1 | ✅ Running |
| 192.168.11.241 | 2401 | besu-rpc-thirdweb-0x8a-1 | ✅ Running |
| 192.168.11.242 | 2402 | besu-rpc-thirdweb-0x8a-2 | ✅ Running |
| 192.168.11.243 | 2403 | besu-rpc-thirdweb-0x8a-3 | ✅ Running |
Test All RPC Nodes
# Quick test all RPC nodes
for ip in 192.168.11.211 192.168.11.221 192.168.11.233 192.168.11.234 192.168.11.235 192.168.11.236 192.168.11.237 192.168.11.238 192.168.11.240 192.168.11.241 192.168.11.242 192.168.11.243; do
curl -s -X POST -H "Content-Type: application/json" \
--data '{"jsonrpc":"2.0","method":"eth_blockNumber","params":[],"id":1}' \
http://$ip:8545 | grep -q "result" && echo "✓ $ip" || echo "✗ $ip"
done