Management Plane
Learn what the guardian does as your organisation's control suite, and how to deploy and run it.
- Guardian StackThe guardian is your organisation's control suite for its sovereign network. It runs on your own host, admits every machine, renews every credential and acts on running machines.
- Getting StartedDeploy a guardian end to end, from the realm credential that VeilNet gives you to the first machine on your network.
- Deploying a GuardianBuild the guardian stack on one host from three inputs: the realm credential, the anchor binaries and a settings file you fill in.
- Air-Gapped InstallationThe guardian runs with no outbound network access, but building it needs that access. Build it on a connected host, then install it on the target host.
- FIPSLearn which parts of the guardian use FIPS 140-3 validated cryptography, and how to build and use the FIPS base.
- Online, Offline and ExpiredThe realm credential renews online with VeilNet, or you replace it by hand. Whatever its state, nothing inside your tree stops.
- Hosting and ExposureYou reach the guardian through one port, and it connects out to only two places. Choose its address and certificate, and write the firewall rules for its host.