RS1.CORE is not a feature. It is the shape of the thing: a single small computer at the site, a small virtual machine on the public internet, and an always-up tunnel between them. Everything else in this register is a module that sits on top of that shape.
The site sits behind carrier-grade NAT — Starlink hands out an address that cannot be reached from outside. So nothing ever connects in. The site Pi dials out and holds the tunnel open, and the exit node holds the public identity: the DNS name, the certificate, the web pages, the thing you type into a browser. Traffic arrives at the exit node and travels down a tunnel that the site itself established.
That inversion is the single most important design decision in RS1. It means the station needs no fixed address, no port forwarding, no cooperation from the ISP, and no inbound hole in anything. It also means the site can move — different property, different dish, different country — and the public face of the station does not change at all.
| Site host | sitenamepi — a Raspberry Pi at the station |
|---|---|
| Public host | sitename-exit-node — a small cloud VM |
| Transport | WireGuard, dialled out from the site |
| Defeats | CGNAT, dynamic addressing, inbound firewalls |
| Deployed | IKARA (Spring Range, NSW) and ALAMO (Graford, Texas) |
Nothing here yet. Drop images or video into
/projects/rs1/modules/rs1-core/media/ and they appear on this page at the
next build — or list them in module.json with captions
to control the order and the wording.
Not published yet. Code for this module will live in
/projects/rs1/modules/rs1-core/ alongside its module.json, and
gets listed here once it does.