Digilan Edge Platform¶
Digilan Edge is a centrally managed network gateway platform. Operators configure OpenBSD gateways from a web portal. The gateways apply firewall, NAT, interface and service configuration locally, confirm every change or roll it back, and report their state live. Through a fleet of relays, a gateway can publish LAN services at public HTTPS URLs without a public address of its own.
New here? Start with How It Works, which has diagrams of the whole system.
Components¶
| Component | Role |
|---|---|
Edge agent (edge/gateway) |
Go binary on each OpenBSD gateway. Applies config with a 60 s rollback guard, reports state and logs, runs the root console, publishes services, updates itself over the air. |
Nexus (platform/nexus) |
Go Connect RPC control plane, as a Scaleway serverless container per environment. Owns the data model, relay allocation, per-gateway DNS and certificates. |
Portal (platform/portal) |
SvelteKit web UI on Cloudflare Pages. |
Realtime (platform/realtime) |
Cloudflare Worker with one Durable Object per device, bridging the agent's WebSocket to nexus and to portal viewers. |
Authz (platform/authz) |
Go Connect RPC service holding the role grants (acl). |
Relays (edge/relay) |
relayd on Scaleway instances. Forwards published-service traffic by SNI, and carries gateway tunnels over UDP or WebSocket. |
| Zitadel | OIDC identity, one instance (auth.digilan-edge.com) for all environments. Sign-up is invite-only. |
| Postgres | One shared Scaleway RDB instance, with one database per environment. |
| OTA storage | A private bucket per environment for signed agent releases, on beta and stable channels. |
radius-ctrl (FreeRADIUS control plane) and Monsieur Wifi also run on the platform's identity and infrastructure, on dev only.
Documentation sections¶
-
:material-account-circle: User Guide
Day-to-day use of the portal: adding devices, networks, firewall and NAT, published services.
-
:material-server: Admin Guide
Setting up environments, installing and enrolling gateways, identity and roles, operations.
-
:material-code-braces: Developer Guide
Architecture, RPC contracts, data model, and how each repository works.