CyberMind-FR
006ff03c86
MirrorNet Core (secubox-mirrornet): - DID-based identity (did:plc:) with keypair management - Peer reputation scoring (0-100) with trust levels - Service mirroring via reverse proxy chaining - Enhanced gossip protocol with priority routing - Health monitoring with anomaly detection - mirrorctl CLI with 30+ commands Identity Package (secubox-identity): - Standalone DID generation (AT Protocol compatible) - HMAC-SHA256 keys with Ed25519 fallback - Key rotation with backup support - Trust scoring integration - identityctl CLI with 25+ commands P2P Intel Package (secubox-p2p-intel): - Signed IOC sharing for mesh - Collectors: CrowdSec, mitmproxy, WAF, DNS Guard - Cryptographic signing and validation - Source trust verification - Application: nftables/iptables/CrowdSec - Approval workflow for manual review - p2p-intelctl CLI with 20+ commands LuCI Dashboard (luci-app-secubox-mirror): - Identity card with DID, hostname, role - Peer reputation table with trust levels - Gossip protocol statistics - Health alerts with acknowledgment - RPCD handler with 15 methods Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
51 lines
1.2 KiB
Plaintext
51 lines
1.2 KiB
Plaintext
config mirrornet 'main'
|
|
option enabled '1'
|
|
option node_role 'peer'
|
|
# Roles: master, submaster, peer
|
|
option gossip_interval '30'
|
|
option health_interval '60'
|
|
option mirror_enabled '0'
|
|
|
|
config identity 'identity'
|
|
option did_method 'plc'
|
|
# DID format: did:plc:<fingerprint>
|
|
option key_rotation_days '90'
|
|
option backup_keys '1'
|
|
|
|
config reputation 'reputation'
|
|
option enabled '1'
|
|
option initial_score '50'
|
|
# Score range: 0-100
|
|
option decay_interval '86400'
|
|
# Daily decay for inactive peers
|
|
option decay_amount '1'
|
|
option min_trust_score '20'
|
|
# Peers below this are untrusted
|
|
option ban_threshold '10'
|
|
# Peers below this are banned
|
|
|
|
config gossip 'gossip'
|
|
option priority_routing '1'
|
|
option max_hops '5'
|
|
option dedup_window '300'
|
|
# 5 minutes dedup window
|
|
option batch_size '10'
|
|
option compression '1'
|
|
|
|
config mirror 'mirror'
|
|
option enabled '0'
|
|
option upstream_timeout '5'
|
|
option failover_threshold '3'
|
|
# Failures before failover
|
|
option health_check_interval '30'
|
|
option sync_config '1'
|
|
|
|
config health 'health'
|
|
option enabled '1'
|
|
option latency_threshold '500'
|
|
# ms - mark peer as slow
|
|
option packet_loss_threshold '10'
|
|
# % - mark peer as unreliable
|
|
option bandwidth_sample_interval '300'
|
|
option anomaly_detection '1'
|