bingshuo/hololake-system-architecture
Watch
1
0
Fork
You've already forked hololake-system-architecture
 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity

fix(native): let JD resident reach an allowlisted relay

Browse source
This commit is contained in:
冰朔 2026-08-06 19:19:41 +08:00
commit b53e32fb0b
10 changed files with 595 additions and 265 deletions
Download patch file Download diff file Expand all files Collapse all files

3
product-source/hololake-platform/guanghu-os/world-seed/WORLD-MANIFEST.hldp
View file

@ -81,10 +81,13 @@ native_layout:
first_partition_lba: 2048
native_network:
id: GLS-0841-JD-FD-PRIMARY
entry: world/services/native-network/PROTOCOL.hldp
node_id: JD-FD-PRIMARY
device_model: VIRTIO_LEGACY
native_ipv4: 172.16.0.6
gateway_ipv4: 172.16.0.1
relay_ipv4: 43.153.193.169
handshake_direction: NATIVE_INITIATED_OUTBOUND_ICMP
public_nat_address_recorded_in_world: false
gestational_continuity:
id: GLS-0845

40
product-source/hololake-platform/guanghu-os/world-seed/world/services/native-network/PROTOCOL.hldp Normal file
View file

@ -0,0 +1,40 @@
schema: guanghu.native-network/v1
protocol_id: GLS-0841-JD-FD-PRIMARY
node_id: JD-FD-PRIMARY
authority_language: HLDP
device_model: VIRTIO_LEGACY
native_ipv4: 172.16.0.6
gateway_ipv4: 172.16.0.1
relay:
node_id: BS-SG-003
public_ipv4: 43.153.193.169
role: AUTHENTICATED_NATIVE_HANDSHAKE_RELAY
allowed_nat_source_ipv4: 111.228.0.139
handshake:
direction: NATIVE_INITIATED_OUTBOUND_ICMP
request_magic_source: CURRENT_HLDP_COMMAND
response_marker: HLDP-NATIVE-ACK!
expected_sequences: 1-16
ordinary_echo_action: IGNORE
stale_sequence_action: IGNORE_WITHOUT_STATE_ADVANCE
future_sequence_action: IGNORE_WITHOUT_STATE_ADVANCE
accepted_sequence_action: ADVANCE_EXACTLY_ONCE
unexpected_source_action: IGNORE_WITHOUT_REPLY
authority_boundary:
relay_ack_is_liveness_proof_not_authorization: true
relay_cannot_supply_code_content: true
relay_cannot_supply_state_content: true
relay_cannot_select_command: true
native_command_sequence_is_compiled_from_hldp: true
state_bytes_are_compiled_from_hldp: true
standing_authorization_source: GH-OS-AUTH-BINGSHUO-JD-FD-PRIMARY-001
proof:
qemu_reply_is_not_physical_proof: true
relay_receipt_alone_is_not_physical_proof: true
server_owned_lba_134_is_required: true
missing_server_owned_proof: FAIL_0
persona_boundary:
persona_subject: ICE-P-ZY001
persona_subject_state: EXISTS
persona_subject_existence: 100
physical_residency_is_separate_binary_capability: true