feat(device-plane): enable B2 discovery ingress

2026-07-26 00:52:31 +03:00
parent 3c538ad98c
commit 2b1795509b
19 changed files with 2375 additions and 156 deletions
@@ -1,23 +1,30 @@
+import { readFile } from "node:fs/promises";
+
+import { createCoreDiscoveryClient } from "./core-client.mjs";
 import { createDeviceGatewayRuntime } from "./runtime.mjs";

-const listenEnabled = parseBoolean(
-  process.env.DEVICE_GATEWAY_LISTEN_ENABLED,
-  false,
-);
+const config = await readConfig();
+const onDiscovery = config.listenEnabled
+  ? createCoreDiscoveryClient({
+      coreUrl: config.coreUrl,
+      gatewayToken: config.gatewayToken,
+      timeoutMs: config.coreTimeoutMs,
+    })
+  : undefined;
 const runtime = createDeviceGatewayRuntime({
-  listenEnabled,
-  healthHost: String(process.env.DEVICE_GATEWAY_HEALTH_HOST || "127.0.0.1"),
-  healthPort: parsePort(process.env.DEVICE_GATEWAY_HEALTH_PORT, 18121),
-  tcpHost: String(process.env.DEVICE_GATEWAY_TCP_HOST || "127.0.0.1"),
-  tcpPort: parsePort(process.env.DEVICE_GATEWAY_TCP_PORT, 9921),
-  maxConcurrentSessions: parsePositiveInt(
-    process.env.DEVICE_GATEWAY_MAX_SESSIONS,
-    100,
-  ),
-  sessionTimeoutMs: parsePositiveInt(
-    process.env.DEVICE_GATEWAY_SESSION_TIMEOUT_MS,
-    10000,
-  ),
+  listenEnabled: config.listenEnabled,
+  publicIngressEnabled: config.publicIngressEnabled,
+  healthHost: config.healthHost,
+  healthPort: config.healthPort,
+  tcpHost: config.tcpHost,
+  tcpPort: config.tcpPort,
+  maxBufferedBytes: config.maxBufferedBytes,
+  maxConcurrentSessions: config.maxConcurrentSessions,
+  maxSessionsPerAddress: config.maxSessionsPerAddress,
+  maxConnectionsPerMinutePerAddress:
+    config.maxConnectionsPerMinutePerAddress,
+  sessionTimeoutMs: config.sessionTimeoutMs,
+  onDiscovery,
 });

 const addresses = await runtime.start();
@@ -25,7 +32,9 @@ console.log(JSON.stringify({
  event: "device_gateway_started",
  health: addresses.healthAddress,
  tcp: addresses.tcpAddress,
-  publicIngress: "disabled",
+  publicIngress: config.publicIngressEnabled
+    ? "discovery-only"
+    : "disabled",
  commandTransport: "disabled",
 }));

@@ -37,6 +46,80 @@ async function shutdown() {
  process.exit(0);
 }

+async function readConfig() {
+  const listenEnabled = parseBoolean(
+    process.env.DEVICE_GATEWAY_LISTEN_ENABLED,
+    false,
+  );
+  const publicIngressEnabled = parseBoolean(
+    process.env.DEVICE_GATEWAY_PUBLIC_INGRESS_ENABLED,
+    false,
+  );
+  return {
+    listenEnabled,
+    publicIngressEnabled,
+    healthHost: String(
+      process.env.DEVICE_GATEWAY_HEALTH_HOST || "127.0.0.1",
+    ),
+    healthPort: parsePort(process.env.DEVICE_GATEWAY_HEALTH_PORT, 18121),
+    tcpHost: String(
+      process.env.DEVICE_GATEWAY_TCP_HOST
+      || (publicIngressEnabled ? "0.0.0.0" : "127.0.0.1"),
+    ),
+    tcpPort: parsePort(process.env.DEVICE_GATEWAY_TCP_PORT, 9921),
+    maxBufferedBytes: parsePositiveInt(
+      process.env.DEVICE_GATEWAY_MAX_BUFFERED_BYTES,
+      65536,
+    ),
+    maxConcurrentSessions: parsePositiveInt(
+      process.env.DEVICE_GATEWAY_MAX_SESSIONS,
+      100,
+    ),
+    maxSessionsPerAddress: parsePositiveInt(
+      process.env.DEVICE_GATEWAY_MAX_SESSIONS_PER_ADDRESS,
+      10,
+    ),
+    maxConnectionsPerMinutePerAddress: parsePositiveInt(
+      process.env.DEVICE_GATEWAY_MAX_CONNECTIONS_PER_MINUTE_PER_ADDRESS,
+      30,
+    ),
+    sessionTimeoutMs: parsePositiveInt(
+      process.env.DEVICE_GATEWAY_SESSION_TIMEOUT_MS,
+      10000,
+    ),
+    coreUrl: listenEnabled
+      ? requiredValue(
+          process.env.DEVICE_GATEWAY_CORE_URL,
+          "device_gateway_core_url_required",
+        )
+      : "",
+    gatewayToken: listenEnabled
+      ? await readRequiredSecretFile(
+          process.env.DEVICE_GATEWAY_CORE_TOKEN_FILE,
+          "device_gateway_core_token_file_required",
+        )
+      : "",
+    coreTimeoutMs: parsePositiveInt(
+      process.env.DEVICE_GATEWAY_CORE_TIMEOUT_MS,
+      5000,
+    ),
+  };
+}
+
+async function readRequiredSecretFile(path, errorCode) {
+  const normalized = requiredValue(path, errorCode);
+  const value = (await readFile(normalized, "utf8")).trim();
+  if (value.length < 32) throw new Error(errorCode);
+  return value;
+}
+
+function requiredValue(value, errorCode) {
+  if (typeof value !== "string" || value.trim() === "") {
+    throw new Error(errorCode);
+  }
+  return value.trim();
+}
+
 function parsePort(value, fallback) {
  const parsed = Number(value || fallback);
  if (!Number.isSafeInteger(parsed) || parsed < 1 || parsed > 65535) {