Post-Quantum WireGuard Hub (10.0.99.254)
Bridges latitude-tianxia (10.0.99.2) and mobile sovereign nodes over ChaCha20-Poly1305 tunnels reinforced with Rosenpass classic McEliece key exchange.
Tianxia Relay: Hetzner EU Post-Quantum WireGuard & TLS Edge
European sovereign cloud ingress anchor (77.42.80.87 / 2a01:4f9:c015:1a45::1) running Caddy TLS 1.3 edge termination, Rosenpass PQ WireGuard hub, wstunnel :8443, and Unbound DNS sinkhole.
77.42.80.87
European Sovereign Ingress IP
TLS 1.3 + HSTS
Automated Let's Encrypt Edge
Rosenpass PQ
Post-Quantum WireGuard Hub wg0
Unbound + Tor
C2 Sinkhole & Onion Egress
Stealth WebSocket Tunnel (wstunnel :8443)
Encapsulates UDP WireGuard traffic inside standard HTTPS/WebSocket frames on port 8443 to traverse restrictive corporate and cellular firewalls.
Active Feodo & CISA KEV DNS Sinkhole
Unbound recursive resolver at the relay edge blocks known botnet command-and-control domains before packets ever reach internal enclaves.
x402 & Multi-Subdomain Edge Proxy
Low-latency reverse proxy routing public HTTPS traffic across all 28 rasaxmachina.com subdomains with strict CSP and HSTS preload headers.