The Trastevere Static CT log

230 views
Skip to first unread message

Filippo Valsorda

unread,
Jul 31, 2026, 4:34:37 PM (5 days ago) Jul 31
to Certificate Transparency Policy, Ben Cox
Ciao a tutti,

I’m excited to announce a new Static Certificate Transparency log operated by Geomys, named Trastevere.


Trastevere is a production log with equivalent configuration to Tuscolo. It’s meant to provide redundant submission capacity across Geomys-operated logs.

The JSON index of JSON log metadata is at https://trastevere.skylight.geomys.org/logs.json.

This new CT log family is supported by Seeweb, who are providing rack space and bandwidth in their Frosinone, Italy datacenter.

The hardware this time is a refurbished Dell PowerEdge R6515, again with new enterprise SSDs for the main storage pool, for a total of 6,159 EUR.
  • 16-core Zen 3 (Milan) AMD EPYC 7313
  • 128 GB of ECC DDR4 3200 MHz
  • 25 Gbit/s Mellanox ConnectX-4
  • 2x 240 GB Dell M.2 SSDs (md raid1, rootfs)
  • 4x 3.2 TB Dell Gen4 Mixed Use U.2 SSDs (ZFS raidz2)
  • 2x 550W power supplies
The datacenter is in the EU, and Trastevere shares no critical infrastructure with Tuscolo. In fact, Trastevere happens to fall just 5 km short of being 1,500 km away from Tuscolo. (My tickets to move either datacenter by a few km were closed.)


Live statistics are at https://stats.trastevere.sunlight.geomys.org and raw Prometheus metrics are at https://trastevere.sunlight.geomys.org/metrics.

The new logs are included in our main status page at https://status.sunlight.geomys.org.

Similarly to Tuscolo’s staging log Navigli, the Trastevere machine hosts a staging log called Loreto. It accepts the same roots as Navigli. https://loreto.sunlight.geomys.org

The logs.json, config, and stats URLs of Tuscolo have been renamed to mirror Trastevere's. Redirects are in place from the old ones.

Looking forward to more affordable, uneventful CT log operations!

Buon fine settimana,
Filippo
Reply all
Reply to author
Forward
0 new messages