Privilege-separated control plane
The public web layer runs without system privileges and stays separate from infrastructure operations.
OXVRAW.COM / TECHNOLOGY
Technology
A web control plane separated from privileged node agents.
BROWSERHTTPS
→
CADDYSECURITY EDGE
→
PHP CONTROL PLANENO ROOT
→
NODE AGENTSMINIMAL PRIVILEGES
Protocol adapter layer
OpenVPN, Xray VLESS + REALITY, AmneziaWG and WireGuard are represented through a consistent control model.
Minimal node agents
Only small allowlisted agents perform privileged actions on managed VPN nodes.
Hardened container boundary
Read-only filesystems, dropped capabilities and internal networks reduce the exposed attack surface.
Caddy security edge
TLS termination, security headers, request filtering and structured access logs are handled at the edge.
Versioned delivery
Atomic updates, health checks, backups and automatic rollback keep releases predictable.