UTC 00:00:00 SYNC DOCS SYNCED

Document ref · INF-2026-09-06

Infrastructure architecture, gateway contract and license registry.

This document specifies the physical and logical topology behind the LAPAKTOTO network, the public read contract exposed by the status gateway, and the operating licenses held by each server group. All figures are collected by the gateway collector daemon and published without post-processing.

Stack Topology

7 layers · L0 lowest

L06 Status Gateway (read-only) Public JSON contract, 60s edge cache, no write path exposed v2.4.118
L05 Collector Daemon 1s ICMP + TCP probe fan-out, writes to the time-series store RUNNING
L04 Time-Series Store Retention 400d, 10s downsample after 30d, 3 replicas 3/3 SYNC
L03 Anycast Edge Pool 7 active PoPs, BGP withdraw on 3 consecutive probe failures 7 ACTIVE
L02 Transit & Peering 2 upstream transits, 14 IX sessions, RPKI validation enforced RPKI VALID
L01 Compute Fabric Bare-metal, NVMe RAID10, ECC memory, dual PSU per chassis NOMINAL
L00 Facility Tier III+ colocation, N+1 cooling, 2N power distribution TIER III+

Gateway API · v2.4

Base: https://gateway.alsultancuisine.com.au/v2

Read-only endpoints. Responses are application/json, UTF-8, uncompressed under 8 KB. Authentication is not required for the public scope; the X-Node-Scope header narrows a response to a single region.

GET /v2/status

Aggregate health of the whole network. Cached 60s at the edge.

{
  "status": "partial",
  "uptime_90d": 99.982,
  "nodes_active": 7,
  "nodes_total": 8,
  "mean_latency_ms": 57,
  "observed_at": "2026-09-06T04:12:07Z"
}
GET /v2/nodes/{node_id}

Single-node record. Returns 404 if the node has been decommissioned.

{
  "node_id": "SG-EDGE-01",
  "region": "ap-southeast-1",
  "role": "edge/anycast",
  "latency_ms": 11,
  "packet_loss_pct": 0.01,
  "uptime_30d": 99.997,
  "state": "active"
}
GET /v2/latency/histogram?window=24h

Bucketed latency distribution. window accepts 1h, 24h, 7d, 30d.

{
  "window": "24h",
  "bucket_ms": 10,
  "buckets": [412, 1804, 2210, 987, 341, 96, 12],
  "p50": 34, "p95": 96, "p99": 172
}
POST /v2/webhooks/subscribe

Registers an HTTPS callback for state transitions. Requires a bearer token issued by network operations.

// request
{
  "callback_url": "https://ops.alsultancuisine.com.au/hooks/net",
  "events": ["node.down", "node.degraded", "node.recovered"]
}

// 201 Created
{ "subscription_id": "sub_9f31c04a", "secret": "whsec_***" }

Rate Limits & Error Codes

Enforced per source IP

Quota Matrix

HTTP 429 ON BREACH
Rate limit quota per API scope
Scope Endpoint Burst Sustained TTL Cache Auth
public /v2/status 60 req 20 req/min 60s none
public /v2/nodes/{id} 30 req 10 req/min 30s none
public /v2/latency/histogram 15 req 5 req/min 300s none
operator /v2/webhooks/* 10 req 2 req/min — bearer
  • 200Record returned. X-Observed-At carries the collector timestamp.
  • 304Cache still valid against the supplied If-None-Match entity tag.
  • 404Node identifier unknown or decommissioned more than 400 days ago.
  • 429Quota exceeded. Retry-After is returned in whole seconds.
  • 503Collector daemon unreachable. No cached fallback is served for this scope.

Server License Registry

Verified 2026-09-01 · next audit 2026-12-01

Registry EntityLAPAKTOTO Network Operations
Autonomous SystemAS204118
Software LicenseApache-2.0 (collector) · MIT (gateway)
Data LicenseCC BY 4.0
TLS CertificateSHA-256 · expiry 2027-09-05
RPKI ROAVALID · 4 prefixes signed
Abuse Contactnoc@alsultancuisine.com.au
Registry Hasha7f3c9d1e2b04c8856fe

Revision History

Append-only

Gateway Changelog

LAST 5
  • ADD /v2/latency/histogram — percentile fields p50, p95, p99
  • CHG /v2/status — status now returns partial when 1–2 nodes are drained
  • DEP /v1/* — deprecated, removal scheduled 2027-01-01
  • ADD webhooks — HMAC-SHA256 signature on every callback
  • CHG collector — probe interval reduced from 5s to 1s