Self-hosted control plane · V4 Live PoC

The whole edge, on your own terms

DNS, reverse proxy, tunnels and TLS — one dashboard driving real infrastructure on your own metal. No third party between your visitors and your origin.

Open the dashboard See what runs

$ dig +short app.example.com
198.51.100.10
198.51.100.11   # the edge pool answers — your origin never appears

DNS

Authoritative DNS with DNSSEC

Primary–secondary pair with AXFR, inline record editing and one-click zone signing.

Proxy

Proxied records that hide the origin

Public DNS answers with a dedicated edge IP pool; the origin never leaves the record.

Tunnels

Expose services without open ports

WireGuard-based tunnels bring private services to the edge with health and logs in the panel.

TLS

Certificates that renew themselves

ACME DNS-01 per hostname at the edge, with live traffic split by TLS version.