Status
Architecture & Engineering Specification

Edge Node Routing & Manifest Catalog

Comprehensive technical specification of the four traffic legs, ingress demultiplexing topology, and verified enterprise distribution catalogs for TestPR Edge PoP FI-HEL-01.

Ingress Demultiplexing & Routing Topology

[Edge Client / Build Runner / Ingest Device]
       │
       ├── TCP Port 443 (TLS with SNI Demux)
       │     ▼
       │   Edge Ingress Gateway / CDN Router
       │     ├── SNI: cache.runner-fi.test-pr.space ───> Ingress Stream Processor (HTTP/2 ByteStream)
       │     ├── SNI: api.runner-fi.test-pr.space    ───> Diagnostic / Management API (401 Auth Required)
       │     └── SNI: runner-fi.test-pr.space     ───> Node Status & Telemetry Origin
       │
       ├── UDP Port 443 (QUIC)
       │     ▼
       │   Real-Time Transport Engine (QUIC) for sync.runner-fi.test-pr.space

[Public Consumers / CDN Traffic]
       │
       └── HTTPS Port 443 (External CDN / Anycast)
             ▼
           CDN Edge Origin (3rd-level: repo-fi.test-pr.space) ───> Edge Cache / Asset Storage (Range 206)

Traffic Legs Rationale & Authorization Specification

Traffic Leg Endpoint FQDN Protocol & Port Authorization Model Rate Limit & Throughput
Remote Cache CAS ByteStream cache.runner-fi.test-pr.space HTTPS (TCP 443) Worker Session Token / mTLS Unthrottled transport (HTTP/2 ByteStream line-rate)
Cluster Mesh Artifact Sync sync.runner-fi.test-pr.space QUIC (UDP 443) Cluster Mesh Auth PSK Unthrottled transport (QUIC / HTTP/3 line-rate)
Build Artifact & Package Mirror repo-fi.test-pr.space HTTPS (TCP 443) Public Anonymous Read 1,000 req/min per IP (HTTP 206 Partial Content / Cache)
CI/CD Worker Coordinator API api.runner-fi.test-pr.space HTTPS (TCP 443) Cryptographic Bearer Token 120 req/min per token (HTTP 401 Unauthorized unauthenticated)

Public Manifests & Distribution Artifacts

Official toolchain distribution packages for automated CI/CD worker bootstrap, Bazel remote cache execution, and Gradle HTTP build cache integration.

Package Artifact Version Type Download Path
runner-bootstrap-x86_64.tar.gz 2.4.1 Runner Agent Bootstrap & Detection Hooks /dist/v1/pkg/runner-bootstrap-x86_64.tar.gz
bazel-remote-rules.tar.gz 7.4.0 Bazel Remote Execution & Action Cache Rules /dist/v1/pkg/bazel-remote-rules.tar.gz
gradle-cache-plugin.tar.gz 8.10.0 Gradle Remote Build Cache Init Plugin /dist/v1/pkg/gradle-cache-plugin.tar.gz
SHA256SUMS Release Cryptographic Checksum Manifest /dist/v1/pkg/SHA256SUMS
packages.json Index Machine-Readable Catalog Index /dist/v1/pkg/packages.json

Mandatory Enterprise Download & Verify Workflow

Enterprise production policy prohibits unpinned, unverified runtime downloads. Production tenant workers mirror packages into internal artifact repositories (JFrog Artifactory, Sonatype Nexus) or verify release checksums against the enterprise release key provisioned during tenant onboarding.

# Step 1: Download Artifact & Checksum Manifest
curl -fsSLO https://test-pr.space/dist/v1/pkg/runner-bootstrap-x86_64.tar.gz
curl -fsSLO https://test-pr.space/dist/v1/pkg/SHA256SUMS

# Step 2: Integrity Verification
sha256sum --check --ignore-missing SHA256SUMS

# Step 3: Extract to Local Path & Inspect
mkdir -p ./tools/
tar -xzf runner-bootstrap-x86_64.tar.gz -C ./tools/
./tools/bin/runner-init --help