every protected IP across nodes, live figures every 5 s
IP
Node
Tenant
Policy
Inbound
Dropped
Status
Policies
per-destination protection, edited on the owning node
Policy
Node
Profile
IPs
Tenant
Rules
State
Tenants
customers and the IPs they own on each node
Tenant
External id
Contact
IPs
Logins
Status
Nodes
node panels polled every 10 s with their own token
Node
URL
Status
Engine
Policies
Targets
Last seen
Enrolling a new node
On the new node run bash enroll-node.sh --central-endpoint <host:port> --central-pubkey <key> --tunnel-ip 10.10.10.N/24 --tarball shield-xdp.tar.gz. It prints a line like name=... url=http://10.10.10.N:8787 token=...; paste those values into the form above, then add the peer it prints to the WireGuard interface of this VM.
Access
who can sign in, and API tokens for the VPS panel and scripts
Sign-in accounts
Email
Name
Role
Password checked by
Last sign-in
State
API tokens
Send as Authorization: Bearer <token>. Admin tokens can call /api/v1, which the VPS panel and WHMCS use for single sign-on links.
DDoS Shield / central