SILVER/NODEDC_PLATFORM
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

feat(device-edge): standardize Core channel on mTLS 443

Browse Source
This commit is contained in:
Codex
2026-08-12 01:43:04 +03:00
parent 2eb6116880
commit c2d06bddc7
15 changed files with 51 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files
device-plane/docs/ADR_0001_CORE_INITIATED_EDGE_CHANNEL.md
+2 -2
View File
@@ -21,7 +21,7 @@ HTTP/2 bidirectional session:
ARUSNAVI B2
-> raw TCP/9921
-> Device Gateway Edge on the VPS
-> accepted Core-owned mTLS session on TCP/8443
-> accepted Core-owned mTLS session on standard HTTPS TCP/443
-> Device Gateway Core on Synology
-> Device Control Core
```
@@ -220,7 +220,7 @@ The target Edge exposes only:
- management SSH according to the separately accepted management policy;
- raw tracker ingress TCP/9921;
- Core channel TCP/8443 with mandatory mTLS.
- Core channel TCP/443 with mandatory mTLS; this is not a browser or bearer-token endpoint.
Synology exposes no public device or backhaul port. The Edge receives no subnet
route, exit-node capability, Tailscale SSH, Docker socket or generic proxy. The