Skip to content

feat: Seedling API#113

Draft
passcod wants to merge 4 commits intomainfrom
feat/seedling-api
Draft

feat: Seedling API#113
passcod wants to merge 4 commits intomainfrom
feat/seedling-api

Conversation

@passcod
Copy link
Copy Markdown
Member

@passcod passcod commented May 5, 2026

No description provided.

passcod and others added 4 commits May 5, 2026 15:33
Plan for a new QUIC server binary for canopy: separate frond-server crate
speaking a custom application protocol over raw QUIC, ALPN bes.canopy/1,
bare-SPKI mTLS reusing the existing device_keys table, and QUIC-LB
plaintext CIDs for AWS NLB QUIC-passthrough horizontal scaling.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Generates an ephemeral Ed25519 keypair, builds rustls config with
RFC 7250 raw-public-key support on both server and client cert paths,
and binds a quinn endpoint that accepts connections on the negotiated
bes.canopy/1 ALPN. Phase 2 stub: each accepted connection is logged
and immediately closed; real stream handling lands later.

Server identity is in-memory only with a TODO marker for
database-backed persistence. Client verification is permissive
(accepts any well-formed RPK); Phase 4 swaps in an allowlist verifier
pinned to identity.pub.pem.

Includes an integration smoke-test that connects with a quinn client
using ephemeral RPK identity and asserts the ALPN is negotiated.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant