The Promised LAN: A 24/7 Always-On Private Network
2025-07-24
The Promised LAN is a closed, membership-only network operating a 24/7 LAN party since 2021. Its sophisticated architecture connects independent nodes via IPSec, using BGP for routing. A custom TLD (.tpl) powers its DNS, employing distributed root servers and recursive resolvers for high availability. For streamlined TLS certificate management, they've built an internal PKI system leveraging DNS records and SSH for certificate issuance, bypassing external services like ACME. This article details the system's architecture and security policies, showcasing its elegant design and commitment to security.
Read more
Development