novox/hq
3
0
Fork 0
Code Issues 5 Pull Requests 4 Releases Wiki Activity

ADR 0169 (proposed): a machine joins through the tunnel, and the bus is never public #284

Merged
mesh-admin merged 2 commits from jschoubben/a-machine-joins-through-the-tunnel AGit into main 2026-10-02 11:17:43 +00:00
Conversation 0 Commits 2 Files Changed 3
+113
jschoubben commented 2026-10-02 11:13:16 +00:00
Owner
Copy Link
Copy Source

Decision record for review before any code. The bus (4222) is open to the internet only so a new machine can enrol before it has a tunnel (ADR 0004, ADR 0007, the foundation port of issue 051). Proposed: the machine makes its own tunnel key first; the token is issued for that key, assigns its address and makes it a peer of the hub; the token carries the hub's tunnel endpoint and key, the machine's address and the bus's private address; enrolment happens over the tunnel. The bus is no longer a foundation port. Weighs keeping it public, opening it during a join window, and the controller making the key (refused by ADR 0004).

Decision record for review before any code. The bus (4222) is open to the internet only so a new machine can enrol before it has a tunnel (ADR 0004, ADR 0007, the foundation port of issue 051). Proposed: the machine makes its own tunnel key first; the token is issued for that key, assigns its address and makes it a peer of the hub; the token carries the hub's tunnel endpoint and key, the machine's address and the bus's private address; enrolment happens over the tunnel. The bus is no longer a foundation port. Weighs keeping it public, opening it during a join window, and the controller making the key (refused by ADR 0004).
jschoubben added 1 commit 2026-10-02 11:13:16 +00:00
ADR 0169 (proposed): a machine joins through the tunnel, and the bus is never public 331cb94c6e 
The bus was public only so a new machine could enrol before it had a
tunnel. The machine now makes its tunnel key first, the token is issued
for it and makes it a peer of the hub, and enrolment happens over the
tunnel.
jschoubben added 1 commit 2026-10-02 11:17:33 +00:00
ADR 0169 accepted; design 08's join order starts with the tunnel 79642251a1
jschoubben force-pushed jschoubben/a-machine-joins-through-the-tunnel from 331cb94c6e to 79642251a1 2026-10-02 11:17:33 +00:00 Compare
mesh-admin merged commit aa5d9f1045 into main 2026-10-02 11:17:43 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
jschoubben miel.truyen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/hq#284