About this mirror

impersant.isoimage.sbs · IPv4 138.124.100.20 · HTTP / HTTPS / rsync · AS218664, Tallinn · impersant.isoimage.sbs

Hexline Mirror is run by Hexline Systems, a small hosting provider in Tallinn, Estonia, operating AS218664. The mirror is not a product and is not sold: it exists because we were already paying for a rack, a transit port and a pair of 10 GbE uplinks that were not fully used, and because the people who run the company install these distributions every day.

Two administrators look after it, alongside other work. Response to mail is usually within two working days. There is no ticket system, no status dashboard other than the Sync status page, and no service level agreement. If the machine fails on a Friday evening, it may well stay down until Monday morning.

Hardware and software

Roughly 8.68 TB of the array is in use for the nine mirrored trees, and the NVMe cache absorbs the small, repeatedly requested files: index files, Alpine packages and Arch databases. That cache is the reason a single spinning-disk array can serve 48.3 TB in a month without the disks becoming the limit.

Funding

Hexline Systems pays for the rack space, the power, the transit and the original chassis. Donations pay for the disks and for their replacement: the array installed in April 2025 cost EUR 1,860, which 41 people covered between them. Running cost is roughly EUR 90 per month in power and amortisation, with transit effectively free because the port is shared with our own services and never saturated.

There is no donation form on this site, and there will not be one. If you want to contribute hardware or cover a disk, write to impersant.isoimage.sbs and we will tell you what is actually needed. Donors are not listed publicly unless they ask to be.

Access policy

Who may use it

Anyone. No registration, no authentication, no referrer checks, no country blocks. Individuals, companies, universities, CI systems and container builds are all welcome.

Rate limits

There is no per-client bandwidth limit for HTTP and HTTPS. The rsync daemon has 12 concurrent slots with a limit of 4 parallel streams per source address; beyond that the daemon returns a busy message and you should retry later.

Automated clients

Fine, and expected. Please spread scheduled jobs rather than starting every machine at 00:00 UTC, and do not poll /status.json or /health more than once a minute. Recursive scraping of directory listings to build a file index is not fine: use rsync, which is cheaper for both sides.

Downstream mirrors

Permitted and encouraged. Tell us the source address first so we can raise your slot limit and give you a sync window that does not collide with our upstream passes.

Abuse

A client that destabilises the service — thousands of parallel connections, tight retry loops against the same file — is blocked at the firewall without notice, and unblocked as soon as the behaviour stops or you write to us.

Logging and privacy

The web server and the rsync daemon write one line per request, containing the client address, the timestamp, the request line, the status code and the number of bytes sent. These logs are rotated and deleted after 7 days. What survives is the hourly aggregate behind the Statistics page: byte counts, request counts and a count of distinct addresses, with no address retained.

Logs are never sold, published or handed to third parties. They are read by the two administrators, for debugging and for abuse handling, and by nobody else. No analytics service, no cookies, no client-side scripts, no third-party resources are used on this site or in the generated directory listings. Nothing on this host loads anything from another domain.

Content policy

• Every tree is a byte-for-byte copy of its upstream archive. We do not repackage, recompress, re-sign, filter or add anything.
• Signatures and checksums are the upstream ones. Verify packages and images against the distribution keyring; a mirror is untrusted infrastructure by design, and this one makes no claim to be otherwise.
• We do not mirror the Debian security archive, Ubuntu ports, or any non-free firmware beyond what the distributions themselves ship in their standard trees.
• Takedown requests concerning mirrored content belong with the distribution that publishes it; we carry what upstream carries and remove a path only when upstream removes it, or when required by German law.

Maintenance

Planned maintenance is on the first Tuesday of the month, 06:00–07:00 UTC. Kernel and nginx updates are applied then; most of them do not interrupt service, and a reboot takes about four minutes. Unplanned outages are noted on the Sync status page once someone has looked at the machine.

History

Contact

Mail

impersant.isoimage.sbs — sync problems, downstream mirror requests, abuse reports, hardware offers. Include full paths and timestamps in UTC; they save a round trip.

OpenPGP

Fingerprint 4F1A 9C33 B27E 0D58 6AA1 93C4 77B2 E10F 5D68 2A9B. The key is served at /mirror-hexline-net.asc on this host. Encrypted mail is accepted but rarely necessary.

Postal

Hexline Systems, Tallinn, Estonia. Written on request; we would rather receive mail.

Error pages

A missing path returns the plain 404 page, which is served for every tree on this host.