Platform / Overview

Overview

◈
Management interface foundation

The console is deployed, but production tenant data and write operations remain disabled until server-side authentication and RBAC are connected.

Global operations

Platform health at a glance

Operational summary for tenants, authoritative DNS service, edge nodes, and backend health.

◎
DNS queries—Connect analytics source
♙
Active tenants—D1 tenant model pending
⌘
Edge nodes online—Heartbeat data will appear here
♥
Healthy pools—Health telemetry pending
Traffic

DNS query volume

Analytics source not connectedLive query metrics will replace this preview automatically.
Nodes

Regional edge status

View nodes →
NANorth AmericaAwaiting enrolled nodes—
EUEuropeAwaiting enrolled nodes—
APAsia PacificAwaiting enrolled nodes—
Health

Pool health

Health checks →
—
No telemetry yet

Healthy, degraded, and unavailable pools will be summarized here.

Activity

Recent operational events

Open audit log →
✓Management console deployedPublic UI shell · current release
⌘Node identity control plane availableEnrollment, heartbeat, signed requests, and rotation are implemented.
◎GeoIP distribution service availableR2-backed MaxMind delivery is integrated with node authentication.
Platform administration

Tenants

Create and administer isolated customer environments, plans, status, limits, and delegated MSP ownership.

♙

No tenant records connected yet

The D1 tenant schema and protected CRUD API are the next backend slice.

Infrastructure

Edge Nodes

Enroll, observe, disable, revoke, and manage the configuration state of authoritative DNS edge nodes.

⌘

No enrolled nodes to display

Authenticated heartbeat data will populate this view from the existing node control-plane tables.

DNS ownership

Domains

Onboard organization-owned base domains and prove ownership with a unique public DNS TXT challenge before creating managed FQDNs.

Loading scopeDomains are organization-scoped.
DNS configuration

Zones

Manage organization-owned authoritative names, TTLs, default routing actions, and configuration deployment state.

◎

Authoritative names

Organization-scoped FQDN ownership and deployment visibility.

⇄

Default routing

Visible default load-balancing action and fallback behavior.

↗

Deployment state

Saved, pending, deployed, and failed revision status.

Traffic groups

Pools

Build organization-owned backend pools, member weights, administrative states, and health-check relationships.

⇄

Pool management workspace ready

Select an organization scope to manage its Pools.

Traffic destinations

Members

Manage reusable organization-owned backend Members independently from Pools.

●

Member management workspace ready

Select an organization scope to manage its Members.

Policy engine

Routing Policies

Ordered first-match rule profiles that can be assigned to Virtual Servers.

OrderRuleConditionsActionStatus
1North America trafficHuman-readable policy nameContinent = NALoad BalanceEnabled
—Example onlyProduction configuration not connected——Preview
Availability

Health Checks

Configure TCP, TCP-SYN, HTTP/S, ICMP, and SNMP probes with thresholds and recovery hold-down.

♥

Probe configuration

Intervals, timeouts, thresholds, ports, paths, and validation.

✓

Local node state

Per-node/member UNKNOWN, UP, and DOWN status.

◷

Recovery hold-down

Independent recovery timers before members return to service.

Identity & access

Users & Roles

Shared authorization model for Platform Admin, MSP/Reseller, Tenant Owner, Operator, and Read-Only contexts.

P

Platform Administrator

Platform-wide operations with stronger authentication requirements.

M

MSP / Reseller

Delegated tenant lifecycle and scoped administration.

T

Tenant Roles

Owner, Administrator/Operator, and Read-Only/Auditor permissions.

Accountability

Audit Log

Security-sensitive and configuration-changing actions with actor, scope, target, result, source, and before/after context.

▤

Audit stream not connected yet

Events will be server-generated and organization-scoped; the browser will never be the authorization boundary.

Administration

Settings

Platform, organization, authentication, deployment, and operational controls.

Platform

Service plans, platform limits, system-level defaults, and account policies.

Security

Session policy, MFA requirements, federation readiness, and access controls.

Edge Operations

Region definitions, node lifecycle defaults, and configuration distribution settings.

Observability

Analytics

DNS traffic, policy matches, answer distribution, response codes, latency, tenant usage, and operational trends.

⌁

Analytics pipeline is not connected yet

This workspace is ready for the telemetry storage and aggregation layer.

Operations

Alerts

Health, node connectivity, configuration deployment, and platform operational events.

◇

No active alert source connected

Alert rules and notification delivery will be wired after core operational telemetry.

DNS security

DNS Filtering

Category-based DNS policy and threat protection with organization-scoped enforcement.

▽

Filtering policy workspace ready

Category catalog and enforcement services are planned after authoritative routing workflows.