Ilker ManapandClaude Opus 5.5 97dc49cbeb Keep the mirror's management API and its downloads off the network behind it ...

Checked on the live cluster: from any node, the mirror's management API on
:8082 answered — list, fetch, delete — with no credentials. Unset
--api-allow meant anyone. It now means this machine only; the control plane
is let in with --api-allow, which `server init` already wrote for the
mirrors it sets up, or by mutual TLS.

A fetch went to whatever URL it was given, and the file server on :8081
then handed the result to anyone: "fetch http://169.254.169.254/..." read a
cloud's instance metadata through the mirror, and a URL on the LAN read
whatever answered there. Downloads started through the API now go to http
and https only, and are refused at dial time — after resolution, on every
redirect — when the address is loopback, private, link-local, CGNAT or
multicast. --allow-private-sources lets them through for a mirror that
really does copy from a server on its own network. `llmgw mirror add`, run
by someone on the mirror itself, is unchanged.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-09-30 00:27:27 +02:00

..

agent.go

Add llmgw doctor: what a node's GPUs, NVLink and fabric need, checked

2026-09-29 03:51:09 +02:00

bench.go

Keep what a benchmark found out, instead of leaving it in a terminal

2026-09-27 11:51:58 +02:00

capacity.go

Keep what a benchmark found out, instead of leaving it in a terminal

2026-09-27 11:51:58 +02:00

cert.go

Add a private CA and mutual TLS for the agent stream

2026-09-16 07:28:56 +02:00

ctl_fabrictest.go

Measure two nodes' fabric rail by rail: llmgw ctl fabric-test

2026-09-29 21:29:23 +02:00

ctl_logs.go

Show a node's logs on the admin page

2026-09-28 12:27:47 +02:00

ctl.go

Measure two nodes' fabric rail by rail: llmgw ctl fabric-test

2026-09-29 21:29:23 +02:00

ctlweights.go

Carry a download's progress to where somebody is looking at it

2026-09-27 07:49:08 +02:00

dispatcherref_test.go

Measure two nodes' fabric rail by rail: llmgw ctl fabric-test

2026-09-29 21:29:23 +02:00

doctor.go

Install vLLM on every GPU node that can run it, as llama.cpp is

2026-09-29 13:15:54 +02:00

enginecheck_test.go

Ship binaries with releases, and ask engines whether our flags still exist

2026-09-16 16:44:29 +02:00

enginecheck.go

Check llmgw's engine flags against real vLLM and llama.cpp

2026-09-16 16:52:11 +02:00

filter_test.go

Let ctl ask a question instead of printing the whole fleet

2026-09-27 07:30:51 +02:00

filter.go

Let ctl ask a question instead of printing the whole fleet

2026-09-27 07:30:51 +02:00

keys.go

Let a person belong to many places, or to none

2026-09-28 19:03:46 +02:00

memory.go

Manage people and the tenancy tree, from the web and the CLI

2026-09-28 16:26:39 +02:00

mirror_gate_test.go

Keep the mirror's management API and its downloads off the network behind it

2026-09-30 00:27:27 +02:00

mirror_test.go

Say when a replica is running an edited profile, and check a source from the web too

2026-09-27 22:42:26 +02:00

mirror.go

Keep the mirror's management API and its downloads off the network behind it

2026-09-30 00:27:27 +02:00

mirrorinit.go

Put the mirror on its own machine in two commands

2026-09-29 22:17:24 +02:00

model.go

Say when a replica is running an edited profile, and check a source from the web too

2026-09-27 22:42:26 +02:00

modelplan.go

Make the planned entry use an engine that can serve the precision

2026-09-17 07:48:20 +02:00

movestore.go

Move a store to another one without reissuing every key

2026-09-25 16:28:38 +02:00

node.go

Let server init ask for what it needs, and node add take several nodes

2026-09-29 21:54:18 +02:00

org_test.go

Let a person belong to many places, or to none

2026-09-28 19:03:46 +02:00

org.go

Let a person belong to many places, or to none

2026-09-28 19:03:46 +02:00

resolve.go

Manage people and the tenancy tree, from the web and the CLI

2026-09-28 16:26:39 +02:00

root.go

Add a node with one command: llmgw node add, with a terminal screen

2026-09-29 19:33:47 +02:00

servable_test.go

Refuse weights the nodes' llama.cpp cannot load, before fetching them

2026-09-28 20:44:36 +02:00

server.go

Measure two nodes' fabric rail by rail: llmgw ctl fabric-test

2026-09-29 21:29:23 +02:00

serverinit_cluster_test.go

Put the mirror on its own machine in two commands

2026-09-29 22:17:24 +02:00

serverinit_cluster.go

Put the mirror on its own machine in two commands

2026-09-29 22:17:24 +02:00

serverinit_postgres_test.go

Find the PostgreSQL a machine has, rather than assume its names

2026-09-28 14:47:55 +02:00

serverinit_postgres.go

Find the PostgreSQL a machine has, rather than assume its names

2026-09-28 14:47:55 +02:00

serverinit_test.go

Let a person belong to many places, or to none

2026-09-28 19:03:46 +02:00

serverinit.go

Put the mirror on its own machine in two commands

2026-09-29 22:17:24 +02:00

simengine.go

Onboard a node with a script, and find two examples that never worked

2026-09-16 12:28:36 +02:00

sourcenote_test.go

Say when a replica is running an edited profile, and check a source from the web too

2026-09-27 22:42:26 +02:00

sourcenote.go

Say when a replica is running an edited profile, and check a source from the web too

2026-09-27 22:42:26 +02:00

status_test.go

Make the planned entry use an engine that can serve the precision

2026-09-17 07:48:20 +02:00

status.go

Know where the weights are, without owning the storage

2026-09-17 08:21:16 +02:00

storeflag_test.go

Stop calling the PostgreSQL store SQLite, and stop guessing where it is

2026-09-27 12:20:40 +02:00

storeflag.go

Stop calling the PostgreSQL store SQLite, and stop guessing where it is

2026-09-27 12:20:40 +02:00

threads.go

Manage people and the tenancy tree, from the web and the CLI

2026-09-28 16:26:39 +02:00

toolcheck_test.go

Stop tool-check blaming the engine for what the model did

2026-09-18 08:31:09 +02:00

toolcheck.go

Stop tool-check blaming the engine for what the model did

2026-09-18 08:31:09 +02:00

tui_init_test.go

Put the mirror on its own machine in two commands

2026-09-29 22:17:24 +02:00

tui_init.go

Print only what must outlive init's screen, and drop bubbles

2026-09-29 22:37:28 +02:00

tui_node_test.go

Let server init ask for what it needs, and node add take several nodes

2026-09-29 21:54:18 +02:00

tui_node.go

Print only what must outlive init's screen, and drop bubbles

2026-09-29 22:37:28 +02:00

tui_widgets.go

Print only what must outlive init's screen, and drop bubbles

2026-09-29 22:37:28 +02:00

usage.go

Show what a group spent, and fix the reports that never ran on PostgreSQL

2026-09-27 12:26:14 +02:00

users.go

Give an organization's managers a page of their own

2026-09-28 19:23:12 +02:00