Status systemu

—
Uptime
Stabilny

Ruch SYN/min

—
Dynamiczny próg: —
Monitoruj

RTS Findings

—
Live data
Monitor

Alerty

0
Ostatnie 15 min
Działania

Ostatnia aktywność

CzasŹródłoZdarzenieModułStan

History Alert

What happened IP / Address Decision Guardian action
Brak danych

Health Check

Time Component Status
No health checks

Szybkie akcje

Log progu adaptacyjnego (SYN)

CzasWartośćNotatki

Edge status

XDP Status

—
—

Interface

—

Program

—
—

IPv4 Support

—

IPv6 Status

—

Blocked IPv4 Entries

—

Pass total

—

Drop total

—

IPv4 SYN

—

IPv6 SYN

—

IPv4 block src

—

IPv4 block dst

—

Edge live counters

Pass / min

—

Drop / min

—

Raw SYN / min

—
Live counter

Guardian SYN / min

—

Edge to Guardian flow

Edge pass total

—

Edge drop total

—

Guardian analysed SYN / min

—

Current adaptive threshold

—

Blackhole active entries

—

Blocked IPv4 preview

IP Source Reason Added Status
Brak danych

Notes

—
—
—
—

Lista zablokowanych IP (Blackhole)

IP Powód Źródło reguły Data Akcja

RTS Findings

RTS Chain Analyzer observe/intent live view.

Total findings

—
Pending RTS API

Last 15 min

—
Observe mode

Blackhole candidates

—
Not enforced

Operator review

—
Recommendations

RTS Findings table

Archive retention: 30 days
Showing 0–0 of 0
Time Source IP Target IP Proto / port Classification Recommendation Packets Country / city ASN / ISP Confidence
No data

IOC / DNS Policy

Read-only Alpha view for DNS/URL/IP IOC enforcement status.

DNS Policy

—
Generated DNS rules
—

DNS IOC

—
DNS + URL candidates
—

IP IOC

—
IP candidates
—

XDP Sync

—
XDP blocked IPv4
—

IOC Runtime

—
Runtime queue
—

DPI Priority

—
CRITICAL
HIGH —

Brand Abuse

—
Suspects
watch

Homograph / IDN

—
Punycode / Unicode
high risk

IOC Runtime Top Hosts

Observe-only queue for HQ-Lite selective DPI. No active DPI blocking is enabled.

HostRuntime hits
No runtime data

IOC Runtime Check

Check a host or URL against the observe-only HQ-Lite runtime queue. No blocking is performed.

No check performed yet. Observe-only mode.

IOC Observe Hits

Recent observe-only IOC/DPI runtime matches. No blocking is performed.

Archive retention: 30 days older events move to compressed archives

Hits

—
observe_only

Last seen

—
mode

Status

Ready
no blocking
Event ID Time Host Severity Score Action Details
No observe hits loaded.

DNS Policy Details

Policy exact—
Policy tree—
Policy allow—
Threat exclude—
Policy file—
DNS timer—

IP IOC Details

nft guardian_blackhole—
XDP blocked_ipv4—
IP allowlist—
XDP sync timer—
Last update—

Manage DNS / IOC Policy

Expandable Alpha policy editor. Write actions are disabled until backend validation is added.

Policy exact block

Exact host block. Best for single hostnames only.

Policy tree block

Tree block. Blocks domain and subdomains.

Policy allow

Allow exceptions for policy rules. Does not override threat IOC.

Threat exclude

False-positive override for official/trusted domains.
Use this when a legitimate domain is still blocked by Threat IOC.

IP allowlist

Critical infrastructure / trusted IPs excluded from IP IOC enforcement.

Region / TOR — Policy Review

Policy visibility for country rules and TOR network observations. This page shows tickets/audit events only; raw traffic remains in Network Activity.

OBSERVE / VISIBILITY
TOR last 24h
—
Relay / exit observations
Region last 24h
—
Country policy matches
Actions last 24h
—
Expected: 0 in observe
Open tickets
—
Policy review queue

Events

Region Control and TOR events are parsed from region_policy_observe.jsonl.

Time Type Direction Remote IP Local IP Country Decision Action Status Details
Not loaded

Firewall

Firewall rules preview

#ChainRuleState
Backend hook pending

DHCP • Live

Tip: this toggle saves instantly
— LAN IP: — Subnet: — Pool: — DNS: — Lease: —

WAN IPv4

—
Status: —
Interface: — Gateway: — Mode: —

WAN IPv6

—
Status: —
Interface: — Gateway: — Mode: — Prefix: —

DHCP

Rezerwacje

MACIPOpisAkcja

Active Network Rules

Live summary of DMZ, port forwarding and trigger rules prepared for backend integration.

Type Name Target IP Ports Protocol Status Action
Backend integration pending

Network Functions

DMZ, single port forwarding, port range forwarding and port trigger are grouped here to keep the DHCP page clean.

Backend integrated • Alpha

Expose one selected LAN device to inbound WAN traffic.

Forward one external port to one internal LAN device.

Forward a range of WAN ports to a LAN device or service range.

Open inbound ports temporarily after matching outbound trigger traffic. Status: planned / disabled

Live • 2s

Network Activity

IPv4 IPv6 Tor VPN
Daily 24h snapshots compressed .tar.gz
CzasAdresZdarzenieStatus

Echo Probe — network identity view

Devices: — Trusted: — Observations: — Critical: — Warning: — Observe: — LAN: — WAN: — Updated: —

Trusted devices

Observations

Zużycie zasobów

— — — —
Temp — — —
Last update: -- Noctilux offline

Top procesy

#ProcesCPU%RAM

Database

— Updated: — Total: 0
Dashboard database access is intentionally limited to Guardian Short Memory and Long Memory.
Alias Label Tables Action
No database data

Zarządzanie użytkownikami

Widok administratora — edycja roli, reset hasła, włączanie / wyłączanie konta.
Nazwa użytkownika Rola Status Online Ostatnie logowanie Działania

Zmiana hasła

Formularz jest gotowy do podpięcia backendu. Na razie waliduje dane i pokazuje komunikat sukcesu.

Wymagania hasła
  • Minimum 12 znaków
  • Minimum 1 wielka litera
  • Minimum 1 mała litera
  • Minimum 1 cyfra
  • Minimum 1 znak specjalny
  • Nowe hasło i potwierdzenie muszą być zgodne

Watchdog — History / Review

Observe-only view of Watchdog decisions, SSH/SFTP observations, service health and integrity events. No enforcement actions are executed from this page.

OBSERVE MODE
Health
—
Mode: —
Process integrity
—
Unknown / suspicious processes
Service health
—
Unhealthy services / timers
Admin access
—
LAN / non-LAN / root SSH
Last check: — Learning: — Event log: —

Ticket / event history

Latest Watchdog observations from watchdog_observe.jsonl. Click Details to expand evidence.
Time Severity Category Title Decision Action Details
Not loaded

Settings v1 — policy center

Policy center for System Mode and enforcement intent. Frontend requests policy changes, backend validates them, Guardian/Decision Engine enforces them.

Observe Only Armed Mode Maintenance Mode
Not loaded Loaded: — Backend: Settings API v1 Mode: observe_only
Current build: RC policy wiring

System Mode

HQ-Lite starts safe. Armed Mode should be enabled consciously and later license-gated by Matka/TRIO.

Security / Detection

Switches here save backend policy intent for Guardian / Decision Engine. IOC enforcement remains confirmed-only.

Region Control / GeoIP & TOR

Country/TOR blocking is powerful and may affect CDN, cloud, VPN, SaaS and legitimate services. This panel stores conscious admin policy intent; enforcement must still go through Guardian / Decision Engine.

CountryModeDirectionNotesActions
Loading region policy…
Modes: Observe or Block. Directions: inbound, outbound or both.

Watchdog / Process Integrity

Watchdog protects HQ-Lite runtime integrity in Observe mode. Core baseline details are hidden from UI; only safe summary is shown.

Core whitelist

System-managed integrity baseline. Full contents are hidden from UI for security.

Baseline windowInitial observe window used to build protected system baseline.
planned
Core baseline summaryKnown core entries, service profiles and kernel-noise rules are active.
protected

Admin whitelist

Admin-managed exceptions with reason, hash/path and optional TTL. Entries remain monitored by Watchdog.

Add process exceptionPath/hash/service + reason. Suspicious entries may still generate Watchdog review.
Watchdog status Current integrity observer health.
not loaded
Core entries Protected baseline entries visible as a count only.
—
Kernel/system noise ignored Kernel threads and expected system noise ignored by Watchdog.
—
Unknown processes Processes outside the current baseline and policy.
—
Last baseline Last protected baseline creation time.
—
Last check Last Watchdog observe scan.
—

Retention & Storage

Controls how long recent operational data remains visible in the dashboard and how long compressed archives stay available for support or incident review.

Network Activity creates compressed daily 24h snapshots. IOC Runtime, RTS Findings and Region / TOR use rolling event logs: recent events stay active, older events move into downloadable archives.

Disk space Capacity view for logs, archives, updates and safe operation.
—%
0% —% 100%
Used—
Free for work—
Total capacity—
Archive browser

Preview of the future archive manager. Admins will be able to select Network Activity, IOC, RTS and Region / TOR archive packages and download only what they need.

Updates / Maintenance

No blind auto-upgrade for an edge router. Notify first, install in maintenance window.

Not all available packages may be installed in one run. Some packages can remain pending because of dependency order, phased updates, held-back packages, reboot state or packages requiring another install pass. Run “Check now” again after installation and install remaining updates during the next maintenance window if needed.

Update availability Read-only package check. No installation is performed.
Last update check — not checked
Next scheduled check — manual only
Updates available Packages reported by APT cache. —
Security updates Security-related packages if detected. —
Reboot required Detected from /var/run/reboot-required. —
Install updates Manual admin action. Installs available packages after confirmation.
Reboot system Manual reboot only. Network access may be unavailable for up to 1 minute.

Export / Import

Export settings or import a validated settings JSON. Support bundle / diagnostics stays pending.

License / Matka readiness

Future beta behavior: license verified by Matka/TRIO, expired license returns enforcement to Observe Only.

License statusAlpha local build — not enforced yet.
future
Expired license actionDisable Armed Mode, keep DHCP/DNS/routing alive.
observe only

Appearance

Theme and palette are controlled from the top bar.