docs(handoff): app direct ports over mesh — DONE, mesh-verified
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
parent
2ad57c63f1
commit
3037e9808e
@ -187,3 +187,19 @@ shapes; pick what fits the container layer best:
|
|||||||
Either way: extend the bootstrap self-heal, and verify from the MESH side
|
Either way: extend the bootstrap self-heal, and verify from the MESH side
|
||||||
(curl the ULA on 2–3 app ports incl. :8334 from vps2 or .116) — not just
|
(curl the ULA on 2–3 app ports incl. :8334 from vps2 or .116) — not just
|
||||||
from the LAN.
|
from the LAN.
|
||||||
|
|
||||||
|
## DONE (00:30, dev-box agent): app direct ports live over the mesh
|
||||||
|
|
||||||
|
Shape 2-variant implemented INSIDE the backend (`mesh_ports.rs`, `2ad57c63`):
|
||||||
|
a reconcile loop mirrors every public IPv4 listener (>=1024, bound 0.0.0.0,
|
||||||
|
no existing IPv6 any-listener) as a v6-ONLY `[::]:<port>` forwarder to
|
||||||
|
`127.0.0.1:<port>`, following `/proc/net/tcp*` every 15s — so app
|
||||||
|
install/remove and hardcoded companion ports (bitcoin-ui :8334) are covered
|
||||||
|
with zero container changes and no generated units; self-healing because it
|
||||||
|
lives in the binary. Strictly ADDITIVE: IPv4/LAN/Tor paths untouched, v6only
|
||||||
|
cannot intercept v4, foreign IPv6 listeners win.
|
||||||
|
|
||||||
|
Verified FROM THE MESH (vps2 → node ULA): :8334 HTTP 200 (466ms),
|
||||||
|
:18083 200 (306ms), :50002 200 (239ms); LAN :8334 still 200. Deployed to
|
||||||
|
framework-pt + .116 (binary sha 52ac0d8a…). Direct-port apps should now
|
||||||
|
open in the companion over 5G.
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user