This repository contains the code and configuration for the cloud and Kubernetes resources powering the Relaynet-Internet Gateway instances operated by Relaycorp.
The cloud resources are defined in Terraform modules managed on Terraform Cloud. Shared resources can be found in tf-workspace/
, whilst environment-specific resources can be found under environments/
.
Gateways are entirely hosted on Google Cloud Platform (GCP). Each instance is deployed to a highly-available, independent environment under its own GCP project. The following diagram offers a simplified view of the key cloud and Kubernetes resources in each environment:
To learn more about the architecture of the Relaynet-Internet Gateway, please refer to its documentation.
For a few reasons:
Things aren't quite bullet-proof yet. Read issue #8 to learn more about the endgame.
Since Relaynet employs end-to-end encryption, the confidentiality of the communication won't be affected by a successful attack to this infrastructure. Please refer to RS-019 to learn more about the general security threats of Relaynet.
Issues will be reported to UptimeRobot.com.
We're particularly keen to get feedback and PRs to improve the security of the infrastructure. If you've never contributed to a Relaycorp project before, please take a minute to read our guidelines first.
Please note that whilst this repository is open source, this isn't a white-labelled project: The code here is meant to be 100% specific to Relaycorp and we'll often make backwardly-incompatible changes. If you want to use it to host your own instance of the gateway, you should fork this repository and tailor it to your needs; refer to the licence to learn more about what you can do with it.