Edge PoP Ingress & Routing Topology
Technical specifications, authorization requirements, and protocol demultiplexing for node RU-SPB-01.
Technical Justification of the 4 Traffic Legs
Each traffic leg satisfies a distinct enterprise infrastructure requirement within the CI/CD build artifact and package distribution pipeline:
Remote Cache CAS ByteStream
Endpoint: cache.runner-ru.test-pr.space
Protocol: HTTPS / TCP 443 (HTTP/2 ByteStream)
Remote execution content-addressable storage. Provides unthrottled wire-speed upload and download of immutable CAS blobs, compiler output archives, and action caches for build runners.
Cluster Mesh Artifact Sync
Endpoint: sync.runner-ru.test-pr.space
Protocol: QUIC / UDP 443 (Real-Time Transport)
High-speed cluster artifact synchronization. Low-latency point-to-point mesh replication between regional PoP nodes to propagate freshly compiled dependencies across data centers.
Build Artifact & Package Mirror
Endpoint: repo-ru.test-pr.space
Protocol: HTTPS / TCP 443 (HTTP 206 Range)
Static build artifact and package distribution mirror. Serves pre-compiled toolchains, SDK bundles, and public manifests directly to client machines using CDN edge caching and byte-range resumption.
CI/CD Worker Coordinator API
Endpoint: api.runner-ru.test-pr.space
Protocol: HTTPS / TCP 443 (REST)
CI/CD worker authentication and status. Handles node registration, heartbeat telemetry, capacity drained notifications, and cryptographic session authorization.
Ingress & Routing Topology
Single-port edge ingress demultiplexing architecture based on TLS SNI inspection and protocol negotiation:
[Edge Client / Build Runner / Ingest Device]
│
├── TCP Port 443 (TLS with SNI Demux)
│ ▼
│ Edge Ingress Gateway / CDN Router
│ ├── SNI: cache.runner-ru.test-pr.space ───> Ingress Stream Processor (HTTP/2 ByteStream)
│ ├── SNI: api.runner-ru.test-pr.space ───> Diagnostic / Management API (401 Auth Required)
│ └── SNI: runner-ru.test-pr.space ───> Node Status & Telemetry Origin
│
├── UDP Port 443 (QUIC)
│ ▼
│ Real-Time Transport Engine (QUIC) for sync.runner-ru.test-pr.space
[Public Consumers / CDN Traffic]
│
└── HTTPS Port 443 (External CDN / Anycast)
▼
CDN Edge Origin (3rd-level: repo-ru.test-pr.space) ───> Edge Cache / Asset Storage (Range 206)
Authentication & Rate Limits
| Channel Endpoint | Auth Mechanism | Rate Limits | Unauthenticated Response |
|---|---|---|---|
cache.runner-ru.test-pr.space |
Worker Session Token / mTLS | Unthrottled transport (HTTP/2 ByteStream) | HTTP 403 Forbidden |
sync.runner-ru.test-pr.space |
Cluster Mesh Auth PSK | Congestion-controlled line-rate | Connection Reset (Drop) |
repo-ru.test-pr.space |
Public Anonymous Read | 1,000 req/min per IP (HTTP 206 Cache) | Allowed (Public Access) |
api.runner-ru.test-pr.space |
Cryptographic Bearer Token | 120 req/min per Bearer token | HTTP 401 Unauthorized |
Public Manifests & Distribution Artifacts
Public build artifacts and toolchain packages are available under dist/v1/pkg/.
Runners should verify SHA-256 cryptographic signatures prior to execution: