Systems we build
and operate.

We build and run these public services ourselves to validate our way of working on real production traffic. It keeps our engineering sharp and shows how we build software that holds up.

nelsink.com

W3C Network Error Logging collector

Visit nelsink.com

Browser-native network telemetry platform that captures real-user DNS, TCP, TLS, and HTTP failures out-of-band directly from the browser network stack. It surfaces regional ISP routing drops and certificate errors that client-side JavaScript monitors never see.

Architecture
High-throughput Rust edge receiver over HTTP/2 and HTTP/3 (QUIC), ClickHouse analytics, and Valkey abuse quarantine.
How it operates
Requires zero client-side JavaScript SDKs; browsers report failures asynchronously via standard W3C HTTP response headers.

imgdumper.nl

Fast, ad-free media hosting since 2007

Visit imgdumper.nl

Privacy-first Dutch image and media hosting service running continuously since 2007. Anyone can drop an image and get clean direct links, forum BBCode, or Markdown embeds in seconds without ads, trackers, or forced account signups.

Architecture
Python and Django on Granian ASGI, custom Go caching image proxy backed by Ceph RadosGW S3 storage, Redis, and ClickHouse.
How it operates
Supports modern formats (AVIF, WebP, HEIF, PNG, JPEG, GIF) with instant thumbnailing and optional passwordless album management.

dmarcsink.com

DMARC telemetry & email authentication

Visit dmarcsink.com

Zero-setup DMARC monitoring that lets domain owners point their DNS rua record to reports@dmarcsink.com for immediate, passwordless visibility into SPF and DKIM alignment, third-party sender health, and active spoofing attempts.

Architecture
Rust SMTP daemon and streaming XML parser, ClickHouse analytical storage, PostgreSQL, and S3 object storage.
How it operates
Domain access and organization ownership are governed directly by live DNS TXT records with zero vendor lock-in.

xyz.frl

Stateless Dynamic DNS & MCP server

Visit xyz.frl

Free, database-free Dynamic DNS updater and public Model Context Protocol (MCP) server. Hostname ownership and update credentials are verified cryptographically rather than stored in a user database, keeping the service fast and stateless.

Architecture
Written in Rust with Axum and Tokio, using HashiCorp Vault Transit (SHA2-256 HMAC) and authoritative DNS APIs.
How it operates
Supports standard DynDNS v2 updates for routers and Linux servers alongside remote MCP tools for AI agents.