79 lines
2.8 KiB
JSON
79 lines
2.8 KiB
JSON
{
|
|
"schemaVersion": "nodedc.device-edge-vps.command-transport.v1",
|
|
"mode": "provider-neutral-typed-command-transport-over-accepted-core-channel",
|
|
"status": "active-typed-command-transport",
|
|
"authority": "DCPLATFORM-21/DCPLATFORM-76/ADR-0001",
|
|
"component": "device-edge-vps",
|
|
"phase": "command-transport",
|
|
"runtimeHost": "koffyvngij",
|
|
"predecessorPatch": "device-edge-vps-tracker-ingress-20260812-012",
|
|
"predecessorArtifactSha256": "290acef118839c6b0c31aac864c47da1832a289537366af9322d4624a1dd81ec",
|
|
"runtimeUser": "nodedc-channel",
|
|
"runtimeService": "nodedc-device-edge-channel.service",
|
|
"runtimeComposition": "single-process-core-channel-plus-universal-device-gateway",
|
|
"publicIngress": "tcp/443-mtls-core-channel+tcp/9921-bidirectional-tracker-session",
|
|
"trackerIngress": "preserved:allowlisted-adapters-only",
|
|
"initialAdapterProfile": "arusnavi.b2.internal.v1",
|
|
"commandTransport": "typed-service-ping-v1",
|
|
"commandCatalog": "allowlisted-adapter-typed-commands-only",
|
|
"allowedCommands": [
|
|
"service.ping"
|
|
],
|
|
"credentialBoundary": "transient-over-pinned-mtls-in-memory-until-single-tracker-write-never-stored-never-logged-never-returned",
|
|
"responseBoundary": "exact-adapter-parser-serv-ok-only",
|
|
"health": "127.0.0.1:18222",
|
|
"adapterHealth": "127.0.0.1:18221",
|
|
"rawDeviceTcp9921": "public-bidirectional-tracker-session-no-generic-forwarding",
|
|
"gelios": "untouched-legacy-only",
|
|
"tailscale": "absent",
|
|
"dataBoundary": "no-vps-database-no-business-logic-no-synology-route",
|
|
"resourceCeilings": {
|
|
"memory": "192M",
|
|
"swap": "0",
|
|
"cpu": "75%",
|
|
"tasks": 128,
|
|
"openFiles": 1024,
|
|
"sessions": 128,
|
|
"sessionsPerAddress": 16,
|
|
"connectionsPerMinutePerAddress": 60,
|
|
"sessionBufferBytes": 65536,
|
|
"aggregateBufferBytes": 33554432
|
|
},
|
|
"preserved": [
|
|
"management-ssh-key",
|
|
"accepted-node-runtime",
|
|
"accepted-core-channel-trust-and-registration",
|
|
"accepted-tracker-ingress",
|
|
"retired-tailnet-boundary",
|
|
"gelios-production-path"
|
|
],
|
|
"forbidden": [
|
|
"vps-initiated-synology-connection",
|
|
"generic-tcp-forwarding",
|
|
"tailscale-runtime",
|
|
"docker",
|
|
"public-health",
|
|
"vps-database",
|
|
"vps-business-logic",
|
|
"unregistered-adapter",
|
|
"raw-command",
|
|
"firmware-command",
|
|
"reboot-command",
|
|
"persistent-command-credential"
|
|
],
|
|
"acceptance": [
|
|
"exact-tracker-ingress-012-predecessor",
|
|
"single-non-root-edge-process",
|
|
"core-channel-remains-accepted",
|
|
"public-tracker-tcp-9921-listening",
|
|
"adapter-profile-allowlisted",
|
|
"typed-service-ping-only",
|
|
"exact-serv-ok-response-parser",
|
|
"bounded-session-and-buffer-limits",
|
|
"tailscale-remains-absent",
|
|
"no-vps-to-synology-route",
|
|
"gelios-untouched"
|
|
],
|
|
"rollback": "restore-exact-tracker-ingress-012-source-and-existing-runtime"
|
|
}
|