diff --git a/etc/systemd/network/tyo.ns1.grapheneos.org.link b/etc/systemd/network/tyo.ns1.grapheneos.org.link
new file mode 100644
index 0000000..4bde732
--- /dev/null
+++ b/etc/systemd/network/tyo.ns1.grapheneos.org.link
@@ -0,0 +1,5 @@
+[Match]
+MACAddress=56:00:05:c4:e3:94
+
+[Link]
+Name=public
diff --git a/etc/systemd/network/tyo.ns1.grapheneos.org.network b/etc/systemd/network/tyo.ns1.grapheneos.org.network
new file mode 100644
index 0000000..7d16aa6
--- /dev/null
+++ b/etc/systemd/network/tyo.ns1.grapheneos.org.network
@@ -0,0 +1,13 @@
+[Match]
+Name=public
+
+[Network]
+DHCP=ipv4
+
+# 2602:f4d9::/48 anycast subnet for ns1 instances
+[Address]
+Address=2602:f4d9::1/128
+PreferredLifetime=0
+
+[DHCP]
+UseMTU=true
diff --git a/hosts.sh b/hosts.sh
index d34bbc4..acfe22d 100644
--- a/hosts.sh
+++ b/hosts.sh
@@ -7,6 +7,7 @@ declare -Ar hosts_hostname=(
     [nyc.ns1.grapheneos.org]=ns1-nyc
     [sea.ns1.grapheneos.org]=ns1-sea
     [sin.ns1.grapheneos.org]=ns1-sin
+    [tyo.ns1.grapheneos.org]=ns1-tyo
     [brn.ns2.grapheneos.org]=ns2-brn
     [las.ns2.grapheneos.org]=ns2-las
     [mia.ns2.grapheneos.org]=ns2-mia
@@ -60,6 +61,7 @@ declare -Ar hosts_authorized_keys=(
     [mia.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [sea.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [sin.ns1.grapheneos.org]=authorized_keys-replica-ns1
+    [tyo.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [brn.ns2.grapheneos.org]=authorized_keys-replica-ns2
     [las.ns2.grapheneos.org]=authorized_keys-replica-ns2
     [mia.ns2.grapheneos.org]=authorized_keys-replica-ns2
@@ -84,6 +86,7 @@ declare -Ar hosts_firewall=(
     [nyc.ns1.grapheneos.org]=ns1
     [sea.ns1.grapheneos.org]=ns1
     [sin.ns1.grapheneos.org]=ns1
+    [tyo.ns1.grapheneos.org]=ns1
     [brn.ns2.grapheneos.org]=ns2
     [las.ns2.grapheneos.org]=ns2
     [mia.ns2.grapheneos.org]=ns2
@@ -165,6 +168,7 @@ declare -Ar hosts_conntrack_size=(
     [nyc.ns1.grapheneos.org]=65536
     [sea.ns1.grapheneos.org]=65536
     [sin.ns1.grapheneos.org]=65536
+    [tyo.ns1.grapheneos.org]=65536
     [brn.ns2.grapheneos.org]=65536
     [las.ns2.grapheneos.org]=65536
     [mia.ns2.grapheneos.org]=65536
@@ -224,6 +228,7 @@ declare -Ar hosts_ipv4_address=(
     [nyc.ns1.grapheneos.org]=66.135.8.22
     [sea.ns1.grapheneos.org]=66.42.74.68
     [sin.ns1.grapheneos.org]=139.180.154.140
+    [tyo.ns1.grapheneos.org]=66.42.42.15
     [brn.ns2.grapheneos.org]=107.189.3.168
     [las.ns2.grapheneos.org]=205.185.124.155
     [mia.ns2.grapheneos.org]=45.61.188.113
@@ -257,6 +262,7 @@ declare -Ar hosts_ipv6_address=(
     [nyc.ns1.grapheneos.org]=2001:19f0:1000:c0d4:5400:05ff:fec1:7c21
     [sea.ns1.grapheneos.org]=2001:19f0:8001:0438:5400:05ff:fec1:9dbd
     [sin.ns1.grapheneos.org]=2401:c080:1400:4890:5400:05ff:fec2:23b0
+    [sin.ns1.grapheneos.org]=2001:19f0:7001:5695:5400:05ff:fec4:e394
     [brn.ns2.grapheneos.org]=2605:6400:30:ec25:102c:af6d:5be:1eb8
     [las.ns2.grapheneos.org]=2605:6400:20:1c8f:a0c9:372d:482e:945b
     [mia.ns2.grapheneos.org]=2605:6400:40:ffbd:14e7:d270:fd75:600c
@@ -281,7 +287,7 @@ declare -Ar hosts_ipv6_address=(
 )
 
 readonly hosts_ns1=(
-    {fra,lax,lon,mia,nyc,sea,sin}.ns1.grapheneos.org
+    {fra,lax,lon,mia,nyc,sea,sin,tyo}.ns1.grapheneos.org
 )
 
 readonly hosts_ns2=(
@@ -323,7 +329,7 @@ readonly hosts_primary=(
 )
 
 readonly hosts_secondary=(
-    {fra,lax,lon,mia,sea,sin}.ns1.grapheneos.org
+    {fra,lax,lon,mia,sea,sin,tyo}.ns1.grapheneos.org
     {brn,las,mia}.ns2.grapheneos.org
     {bhs1,fra,gra,hio,las,sin0,sin1}.grapheneos.org
     {lax,lon}.releases.grapheneos.org
@@ -372,7 +378,7 @@ readonly hosts_all=(
 )
 
 readonly hosts_vultr=(
-    {fra,lax,lon,mia,nyc,sea,sin}.ns1.grapheneos.org
+    {fra,lax,lon,mia,nyc,sea,sin,tyo}.ns1.grapheneos.org
 )
 
 readonly hosts_buyvm=(
diff --git a/packages/tyo.ns1.grapheneos.org b/packages/tyo.ns1.grapheneos.org
new file mode 100644
index 0000000..9a5446e
--- /dev/null
+++ b/packages/tyo.ns1.grapheneos.org
@@ -0,0 +1,43 @@
+b3sum
+base
+bird
+chrony
+cloud-guest-utils
+conntrack-tools
+dnsdist
+ethtool
+fish
+geoip
+geoipupdate
+grub
+htop
+ioping
+iperf
+libmaxminddb
+linux-lts
+logrotate
+man-db
+mmdblookup
+moreutils
+mtr
+neovim
+nftables
+nginx
+nmap
+openssh
+pacman-contrib
+pacutils
+plocate
+powerdns
+pv
+rsync
+strace
+stress
+syslog-ng
+sysstat
+tinyxxd
+tree
+unbound
+xfsprogs
+yaml-cpp
+zerotier-one