eric/geth
Watch
1
0
Fork
You've already forked geth
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Advertise signed peer cards on LAN

Browse source
This commit is contained in:
Eric Wendland 2026-05-18 17:05:43 +02:00
commit d5a548182b
10 changed files with 306 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/architecture.md
View file

@ -49,8 +49,10 @@ them. `geth peer ping <node-id>` dials an imported peer card over Iroh and
exchanges signed peer-card metadata. `geth peer auth-check <node-id>
<resource> <capability>` sends a protected Iroh control request that validates
the caller's signed peer card against the actual Iroh EndpointID before
evaluating resource-local capabilities. Automatic signed peer-card
advertisement over LAN discovery remains separate future work.
evaluating resource-local capabilities. When local discovery is enabled, the
daemon also advertises and discovers signed peer cards through a geth-specific
mDNS service. The LAN payload is TXT-encoded signed metadata only; remote geth
traffic still uses Iroh.
Peer cards are the discovery payload. A peer card carries node ID, agent ID,
endpoint candidates, timestamp, signing public key, and an Ed25519 signature