bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

docs(native): seal JD temporary firewall cleanup

Browse source
This commit is contained in:
冰朔 2026-08-07 12:29:45 +08:00
commit 48ad2a411f
2 changed files with 63 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

56
product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-FIREWALL-CLEANUP-RECEIPT-20260807.hdlp Normal file
View file

@ -0,0 +1,56 @@
schema: guanghu.jd-native-anchor-firewall-cleanup-receipt/v1
receipt_id: GH-OS-JD-FD-PRIMARY-NATIVE-ANCHOR-FIREWALL-CLEANUP-20260807-001
status: PASS_100_TEMPORARY_RULE_REMOVED
observed_at: 2026-08-07T12:27:07+08:00
node_id: JD-FD-PRIMARY
cloud_instance:
provider: JD_CLOUD
instance_id: lavm-eplauh8ezr
region: cn-north-1
removed_rule:
type: CUSTOM_TCP
protocol: TCP
destination_port: 3922
source: 43.153.193.169/32
remark: GHOS-JD-NATIVE-ANCHOR-GATE-20260807
purpose: ONE_TIME_PHYSICAL_NATIVE_ANCHOR_ACCEPTANCE
control_plane_readback:
rule_absent: true
port_3922_absent: true
source_43_153_193_169_32_absent: true
remark_absent: true
remaining_rule:
type: SSH
protocol: TCP
destination_port: 22
source: 0.0.0.0/0
network_readback:
probe_origin: BS-SG-003
probe_origin_ipv4: 43.153.193.169
destination: 111.228.0.139:3922
request: GET /v1/anchor
connect_timeout_seconds: 5
curl_exit_code: 28
http_status: 000
result: PASS_100_CLOUD_INGRESS_BLOCKED
server_state_after_cleanup:
operating_system: ubuntu_22.04
boot_id: 9e61f880-8537-4a02-b4ad-753160798f46
grub_default: gnulinux-simple-9e4550a0-452b-4f28-b5a5-d5364aa450f6
grub_next_entry: EMPTY
linux_listener_3922: 127.0.0.1_ONLY
native_candidate_sha256: eb97af70fd71a5c8d2b52adb1439bd02764c83cdb79b797e62a632eeddb6f786
safety:
temporary_acceptance_exposure_closed: true
ssh_rule_unchanged: true
production_native_cutover: FORBIDDEN
server_receipt:
path: /guanghu/recovery/JD-FD-PRIMARY-anchor-sequence-91f2c227485b2af20ce99364104ab00d8a5f4ba3/CLOUD-FIREWALL-CLEANUP-RECEIPT.hldp
transferred_sha256: 469dd736f1995d0044aced46d547e2e947c8386000fc0838f3ac9127b02555a6
gates:
native_anchor_http_physical_capability: 100
public_front_door_native_anchor_equivalence: 0
code_channel_service_equivalence: 0
production_native_cutover: 0
decision:
next_action: BUILD_NATIVE_CODE_CHANNEL_OR_SAFE_FRONT_DOOR_PROJECTION_BEFORE_DEFAULT_CUTOVER

7
product-source/hololake-platform/guanghu-os/deployments/JD-FD-PRIMARY/NATIVE-ANCHOR-PHYSICAL-GATE-RECEIPT-20260807.hdlp
View file

@ -90,6 +90,13 @@ gates:
server_receipt:
path: /guanghu/recovery/JD-FD-PRIMARY-anchor-sequence-91f2c227485b2af20ce99364104ab00d8a5f4ba3/PHYSICAL-GATE-RECEIPT.hldp
sha256: 21f228ba8772f1d2cec9f506bf20471ddae8aaa9e1995aa339c1f9f839dd037a
temporary_firewall_cleanup:
status: PASS_100_TEMPORARY_RULE_REMOVED
removed_source: 43.153.193.169/32
removed_destination_port: 3922
control_plane_rule_absent: true
relay_connect_result: TIMEOUT_BLOCKED
receipt: NATIVE-ANCHOR-FIREWALL-CLEANUP-RECEIPT-20260807.hdlp
decision:
production_cutover: FORBIDDEN
next_action: BUILD_NATIVE_CODE_CHANNEL_OR_SAFE_FRONT_DOOR_PROJECTION_BEFORE_DEFAULT_CUTOVER