Ilker ManapandClaude Opus 5.5 43d3c12302 Make a member's own access rules hostssl when the cluster keeps them there ...

A cluster set up before the rules moved into the shared configuration kept
them in each member's config.yml, which the TLS step never looked at — and
then said its remote rules were hostssl. Found on the PoC: plaintext
connections were still accepted.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-04 12:11:05 +02:00

..

account

Count sign-in attempts per address and client, guard the sign-in form with a token, ration both forms per address

2026-10-04 10:26:29 +02:00

accounting

Skip capacity fallbacks the key may not use, and charge what the model that answered costs

2026-10-04 10:13:59 +02:00

agent

Report a ready engine dying from every connection, adopted ones included

2026-10-04 11:50:09 +02:00

auth

Believe X-Forwarded-* only from router.trusted_proxies

2026-10-04 10:29:02 +02:00

bench

Give every engine a key only the router holds

2026-09-30 00:38:29 +02:00

cli

Put etcd and Patroni's API on TLS, and move a running cluster there in maintenance mode

2026-10-04 12:07:17 +02:00

clientip

Believe X-Forwarded-* only from router.trusted_proxies

2026-10-04 10:29:02 +02:00

config

Keep llmgw's internal ports to the cluster's networks with an nftables table of its own

2026-10-04 11:03:46 +02:00

control

Hide the mirror's bookkeeping, bound GGUF array nesting, and forget old serve jobs and downloads

2026-10-04 10:56:16 +02:00

docgen

Keep llmgw's internal ports to the cluster's networks with an nftables table of its own

2026-10-04 11:03:46 +02:00

doctor

Keep llmgw's internal ports to the cluster's networks with an nftables table of its own

2026-10-04 11:03:46 +02:00

firewall

Keep llmgw's internal ports to the cluster's networks with an nftables table of its own

2026-10-04 11:03:46 +02:00

gguf

Hide the mirror's bookkeeping, bound GGUF array nesting, and forget old serve jobs and downloads

2026-10-04 10:56:16 +02:00

hf

Plan a repository's files against the fleet, and serve the one that suits it the way it fits

2026-10-04 01:03:48 +02:00

join

Bound idle time, header size and request reading on every listener, and connections on the client port

2026-10-04 10:21:15 +02:00

mirror

Hide the mirror's bookkeeping, bound GGUF array nesting, and forget old serve jobs and downloads

2026-10-04 10:56:16 +02:00

modelplan

Busy is not unfit: rank files by the hardware the cluster has, and let a model wait for its cards

2026-10-04 01:17:32 +02:00

obs

Release v0.10.4: CPU threads, tracing, and the rest of the review

2026-09-30 04:00:35 +02:00

onboard

Do not warn of a missing firewall during the node add that writes it

2026-10-04 11:58:18 +02:00

pgha

Make a member's own access rules hostssl when the cluster keeps them there

2026-10-04 12:11:05 +02:00

preflight

Open setup screens or a console when llmgw runs bare in a terminal

2026-10-03 21:33:59 +02:00

promq

Show usage over time, per organization, team, project and person

2026-09-28 08:11:31 +02:00

release

Install only releases signed with the key built in; fetch a node's release on the control plane

2026-10-04 09:48:03 +02:00

router

End a session unused for a day, and purge dead sessions and claims hourly

2026-10-04 10:50:56 +02:00

safedial

Keep the control plane's fetches off link-local addresses, and see through NAT64, 6to4 and proxies

2026-10-04 10:48:01 +02:00

settings

Watch the cluster and edit every setting from the console

2026-10-03 22:54:09 +02:00

sim

Onboard a node with a script, and find two examples that never worked

2026-09-16 12:28:36 +02:00

sourcecheck

Keep the control plane's fetches off link-local addresses, and see through NAT64, 6to4 and proxies

2026-10-04 10:48:01 +02:00

store

End a session unused for a day, and purge dead sessions and claims hourly

2026-10-04 10:50:56 +02:00

tlsconf

Put etcd and Patroni's API on TLS, and move a running cluster there in maintenance mode

2026-10-04 12:07:17 +02:00

version

Switch the project language to English

2026-09-16 01:15:21 +02:00

web

Serve every page under a hash-based Content-Security-Policy, and update KaTeX to 0.16.47

2026-10-04 10:54:04 +02:00