diff --git a/etc/systemd/network/lon.ns1.grapheneos.org.link b/etc/systemd/network/lon.ns1.grapheneos.org.link
new file mode 100644
index 0000000..01f2734
--- /dev/null
+++ b/etc/systemd/network/lon.ns1.grapheneos.org.link
@@ -0,0 +1,5 @@
+[Match]
+MACAddress=56:00:05:c3:f3:f8
+
+[Link]
+Name=public
diff --git a/etc/systemd/network/lon.ns1.grapheneos.org.network b/etc/systemd/network/lon.ns1.grapheneos.org.network
new file mode 100644
index 0000000..e9110cd
--- /dev/null
+++ b/etc/systemd/network/lon.ns1.grapheneos.org.network
@@ -0,0 +1,11 @@
+[Match]
+Name=public
+
+[Network]
+DHCP=ipv4
+
+# 2602:f4d9::/48 anycast subnet for ns1 instances
+Address=2602:f4d9::1/128
+
+[DHCP]
+UseMTU=true
diff --git a/hosts.sh b/hosts.sh
index 1c7fc0e..5969ffb 100644
--- a/hosts.sh
+++ b/hosts.sh
@@ -2,6 +2,7 @@ declare -Ar hosts_hostname=(
     [ns1.staging.grapheneos.org]=ns1-staging
     [fra.ns1.grapheneos.org]=ns1-fra
     [lax.ns1.grapheneos.org]=ns1-lax
+    [lon.ns1.grapheneos.org]=ns1-lon
     [mia.ns1.grapheneos.org]=ns1-mia
     [nyc.ns1.grapheneos.org]=ns1-nyc
     [sea.ns1.grapheneos.org]=ns1-sea
@@ -55,6 +56,7 @@ declare -Ar hosts_hardware_watchdog=(
 declare -Ar hosts_authorized_keys=(
     [fra.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [lax.ns1.grapheneos.org]=authorized_keys-replica-ns1
+    [lon.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [mia.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [sea.ns1.grapheneos.org]=authorized_keys-replica-ns1
     [sin.ns1.grapheneos.org]=authorized_keys-replica-ns1
@@ -77,6 +79,7 @@ declare -Ar hosts_firewall=(
     [ns1.staging.grapheneos.org]=ns1
     [fra.ns1.grapheneos.org]=ns1
     [lax.ns1.grapheneos.org]=ns1
+    [lon.ns1.grapheneos.org]=ns1
     [mia.ns1.grapheneos.org]=ns1
     [nyc.ns1.grapheneos.org]=ns1
     [sea.ns1.grapheneos.org]=ns1
@@ -158,6 +161,7 @@ declare -Ar hosts_conntrack_size=(
     [ns1.staging.grapheneos.org]=65536
     [fra.ns1.grapheneos.org]=65536
     [lax.ns1.grapheneos.org]=65536
+    [lon.ns1.grapheneos.org]=65536
     [mia.ns1.grapheneos.org]=65536
     [nyc.ns1.grapheneos.org]=65536
     [sea.ns1.grapheneos.org]=65536
@@ -218,6 +222,7 @@ declare -Ar hosts_ipv4_address=(
     [ns1.staging.grapheneos.org]=198.98.56.238
     [fra.ns1.grapheneos.org]=80.240.20.200
     [lax.ns1.grapheneos.org]=140.82.23.46
+    [lon.ns1.grapheneos.org]=192.248.159.52
     [mia.ns1.grapheneos.org]=45.32.173.220
     [nyc.ns1.grapheneos.org]=66.135.8.22
     [sea.ns1.grapheneos.org]=66.42.74.68
@@ -250,6 +255,7 @@ declare -Ar hosts_ipv6_address=(
     [ns1.staging.grapheneos.org]=2605:6400:10:c41:de92:c534:326a:711a
     [fra.ns1.grapheneos.org]=2a05:f480:1800:2acd:5400:05ff:fec2:23a1
     [lax.ns1.grapheneos.org]=2001:19f0:6000:2dcd:5400:05ff:fec1:97db
+    [lon.ns1.grapheneos.org]=2001:19f0:7400:8669:5400:05ff:fec3:f3f8
     [mia.ns1.grapheneos.org]=2001:19f0:9002:2981:5400:05ff:fec1:65c4
     [nyc.ns1.grapheneos.org]=2001:19f0:1000:c0d4:5400:05ff:fec1:7c21
     [sea.ns1.grapheneos.org]=2001:19f0:8001:0438:5400:05ff:fec1:9dbd
@@ -278,7 +284,7 @@ declare -Ar hosts_ipv6_address=(
 )
 
 readonly hosts_ns1=(
-    {fra,lax,mia,nyc,sea,sin}.ns1.grapheneos.org
+    {fra,lax,lon,mia,nyc,sea,sin}.ns1.grapheneos.org
 )
 
 readonly hosts_ns2=(
@@ -320,7 +326,7 @@ readonly hosts_primary=(
 )
 
 readonly hosts_secondary=(
-    {fra,lax,mia,sea,sin}.ns1.grapheneos.org
+    {fra,lax,lon,mia,sea,sin}.ns1.grapheneos.org
     {brn,las,mia}.ns2.grapheneos.org
     {bhs1,gra0,gra1,las0,las1,sin0,sin1}.grapheneos.org
     {lax,lon}.releases.grapheneos.org
@@ -369,7 +375,7 @@ readonly hosts_all=(
 )
 
 readonly hosts_vultr=(
-    {fra,lax,mia,nyc,sea,sin}.ns1.grapheneos.org
+    {fra,lax,lon,mia,nyc,sea,sin}.ns1.grapheneos.org
 )
 
 readonly hosts_buyvm=(
diff --git a/packages/lon.ns1.grapheneos.org b/packages/lon.ns1.grapheneos.org
new file mode 100644
index 0000000..9a5446e
--- /dev/null
+++ b/packages/lon.ns1.grapheneos.org
@@ -0,0 +1,43 @@
+b3sum
+base
+bird
+chrony
+cloud-guest-utils
+conntrack-tools
+dnsdist
+ethtool
+fish
+geoip
+geoipupdate
+grub
+htop
+ioping
+iperf
+libmaxminddb
+linux-lts
+logrotate
+man-db
+mmdblookup
+moreutils
+mtr
+neovim
+nftables
+nginx
+nmap
+openssh
+pacman-contrib
+pacutils
+plocate
+powerdns
+pv
+rsync
+strace
+stress
+syslog-ng
+sysstat
+tinyxxd
+tree
+unbound
+xfsprogs
+yaml-cpp
+zerotier-one