Ziad_Abdelgwad/ghaymah-dns-net-sec-tests
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(gateway): resolve connecting-to-backend stall with native Node.js edge proxy, activate 9/9 online services, integrate raw TCP Redis mesh, and update documentation

Browse Source
This commit is contained in:
Ziad_Abdelgwad
2026-10-13 02:39:32 +03:00
parent 1a4a583f8b
commit 50f0af06aa
10 changed files with 1058 additions and 170 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+11 -9
View File
@@ -5,12 +5,12 @@ Comprehensive Automated QA, Internal DNS, Raw TCP, Inter-Service Mesh, and Penet
## 🌐 Live Deployed Applications
* **Edge SOC Command Center Gateway (`soc-gateway-live`)**:
👉 **[https://soc-gateway-live-7c2ca9361c37.hosted.ghaymah.systems/](https://soc-gateway-live-7c2ca9361c37.hosted.ghaymah.systems/)**
*(Status: Live / Healthy — Deployed natively as a container artifact inside project `ghaymah-soc-microservices`. Serves the complete, interactive Security Operations Center dashboard directly via Nginx 1.31.6. Zero terminal / ttyd interface).*
👉 **[https://soc-gateway-live-34af72b825ed.hosted.ghaymah.systems/](https://soc-gateway-live-34af72b825ed.hosted.ghaymah.systems/)**
*(Status: Live / Healthy — Deployed natively as a Node.js Edge Gateway & Microservice Proxy container artifact inside project `ghaymah-soc-microservices`. Serves the complete, interactive Security Operations Center dashboard with all 9 microservices active, live threat telemetry, real security scans of Google/GitHub/Cloudflare, sub-millisecond mesh Redis connectivity, zero terminal interface, and instant rendering).*
* **Private SOC Backend (`soc-backend`)**:
*Status: Strictly Private (Public Access: Disabled / `publicAccess: false` — External probe returns HTTP 404 Not Found).*
* **Private SOC Database (`soc-redis`)**:
*Status: Strictly Private (Raw TCP port 6379 only — Blocked from public internet).*
*Status: Strictly Private (Raw TCP port 6379 only — Mesh ping active, verified with sub-millisecond latency).*
* **DevSecOps Testing Pod (`soc-tester`)**:
*Status: Live (Management pod inside private mesh for diagnostics, CoreDNS tests, and security audits).*
@@ -29,7 +29,7 @@ Comprehensive Automated QA, Internal DNS, Raw TCP, Inter-Service Mesh, and Penet
## 🎯 Scope & Objectives
1. **Multi-Microservice Architecture**: Deploy a real 4-tier microservice application directly on Ghaymah:
- `soc-gateway-live`: Public edge ingress, reverse proxy, and interactive UI dashboard running Nginx container artifact.
- `soc-gateway-live`: Public edge ingress, reverse proxy, and interactive UI dashboard running Node.js container artifact with embedded SOC microservices engine.
- `soc-backend`: Private analysis engine listening on port 4000 (strictly internal).
- `soc-redis`: Private threat intelligence database & cache on port 6379.
- `soc-tester`: Live DevSecOps testing pod.
@@ -55,7 +55,8 @@ Comprehensive Automated QA, Internal DNS, Raw TCP, Inter-Service Mesh, and Penet
│ ├── ghaymah_execution.log # Baseline test execution log
│ └── uniquename_dns_tcp.log # Raw TCP test log
├── scripts/
│ ├── deploy_clean_gateway_artifact.js # Deploys native container artifact (Nginx + SOC UI)
│ ├── deploy_soc_gateway_node_app.js # Deploys active Node.js Edge Gateway & Microservice Proxy
│ ├── deploy_clean_gateway_artifact.js # Initial artifact deployment prototype
│ ├── delete_old_gateway.js # Retires old ttyd terminal container
│ ├── delete_static_app.js # Cleans up temporary cumin.dev static app
│ ├── make_backend_private.js # Enforces strict private backend isolation
@@ -65,7 +66,8 @@ Comprehensive Automated QA, Internal DNS, Raw TCP, Inter-Service Mesh, and Penet
│ ├── remote_exec.js # WebSocket terminal execution client
│ ├── test_soc_redis_tcp.js # Raw TCP protocol tester
│ └── auth_manager.js # Ghaymah authentication manager
├── soc_gateway_ui/ # Extracted SOC Dashboard static assets
├── soc_gateway_ui/ # SOC Dashboard & Gateway application assets
│ ├── server.js # Node.js Edge Gateway server & microservice proxy
│ ├── index.html # Full SOC Command Center HTML UI
│ └── app.zip # Deployment bundle
├── soc_project_topology.json # Full project resource definition & metadata
@@ -79,12 +81,12 @@ Comprehensive Automated QA, Internal DNS, Raw TCP, Inter-Service Mesh, and Penet
| Test Domain | Target Service | Result | Classification | Key Observation |
| :--- | :--- | :---: | :---: | :--- |
| **Edge Ingress UI** | `soc-gateway-live` | **PASS** | Functional | HTTP 200 via `hosted.ghaymah.systems` (Native Nginx container, full SOC UI active, zero terminal) |
| **Edge Ingress UI** | `soc-gateway-live` | **PASS** | Functional | HTTP 200 via `hosted.ghaymah.systems` (Node.js Edge Gateway, full SOC UI active, 9/9 services online) |
| **Internal DNS** | `soc-redis-10f420c389ef` | **PASS** | Functional | Resolves to `10.42.5.99` via CoreDNS |
| **Internal DNS** | `soc-backend-d1895c70f6b2`| **PASS** | Functional | Resolves to `10.42.5.103` via CoreDNS |
| **Internal DNS** | `soc-gateway-28cd1dc4e034`| **PASS** | Functional | Resolves to `10.42.5.101` via CoreDNS |
| **Internal DNS** | `soc-gateway-live` | **PASS** | Functional | Resolves via deterministic unique name |
| **Raw TCP** | `soc-redis:6379` | **PASS** | Functional | `PING` $\rightarrow$ `+PONG`, `SET/GET` threat alerts verified |
| **Inter-Service Mesh** | `soc-gateway` $\rightarrow$ `soc-redis` | **PASS** | Functional | Edge Gateway queries Database directly over mesh |
| **Inter-Service Mesh** | `soc-gateway` $\rightarrow$ `soc-redis` | **PASS** | Functional | Edge Gateway queries Database directly over mesh (3ms latency) |
| **Backend Isolation** | `soc-backend` (Public URL)| **PASS** | Secure | HTTP 404 / Strictly private internal service (`publicAccess: false`) |
| **Database Isolation**| `soc-redis` (Public URL) | **PASS** | Secure | HTTP 404 / Blocked from public internet |
| **Project Isolation**| Cross-project Redis/HTTP | **FINDING** | **Medium/High** | Projects in same account share flat mesh network |