Architecture Blueprint & Sovereign Platform

Reallm

A bare-metal zero-trust mesh: autonomous identity, ephemeral compute, local AI.

External cloud trust is replaced by a private WireGuard mesh across five nodes. One host is reachable from the internet. Credentials expire in minutes, and the hosts that run workloads keep nothing after the task ends.

5
Nodes in the mesh
1
Public surface
5–18 min
Credential lifetime
0 bytes
Kept by a runner
01 on edge

Ingress

A request reaches the only internet-facing host — a hardened Cloud VPS running Caddy 2.7 with TLS 1.3. No domain credentials live here.

02 edge → reallm

Mirror

Kernel-level mirroring (tc mirred) copies the packet stream into a VXLAN tunnel, so inspection never sits in the request path.

03 on reallm

Inspect

Deep packet inspection reads the mirror: Suricata 8.0.3 as network intrusion detection (NIDS), events surfacing in EveBox dashboards.

04 black + white

Authorize

Kerberos authenticates the operator with WebAuthn biometrics; the OpenBao Raft leader mints an SSH CA certificate that expires in 5–18 minutes.

05 on grey

Execute, then dissolve

The worker runs a Docker/Podman container on a tmpfs RAM disk under an AppArmor profile. When the task ends, the container and its filesystem are gone.

Node
black
Primary identity & automation
Bare metal · Ubuntu 26.04 LTS
white
Secrets & PKI root
Bare metal · OpenBao Raft leader
grey
Ephemeral container runner
Dedicated worker hosts
reallm
AI compute & SIEM receiver
Dual Intel Arc B70 GPUs
Public
edge
Hardened cloud DMZ
Cloud VPS · DMZ Ingress
Identity & secrets
Primary Samba 4.20 Active Directory domain controller. Kerberos KDC.
Secondary AD DC and leader of 3-node OpenBao Raft cluster. Holds internal PKI root CA & WebAuthn.
Stores no secrets. SSH CA daemon fetches 5-min ephemeral certs.
Identified to mesh by mutual TLS (mTLS). Consumes credentials; never issues.
Public TLS 1.3 termination only. Trusted to forward, not hold trust.
Workload
Ansible Semaphore runner host: automated playbook execution only.
Secret brokerage — response-wrapped single-use self-destructing tokens.
Isolated Docker / Podman containers on tmpfs RAM mounts under AppArmor.
Ollama embeddings & vLLM Llama 3.2 execution + Suricata NIDS & EveBox SIEM.
Primary ingress & kernel tc mirred VXLAN packet mirror sender.
State on disk
Directory database and playbook history.
Encrypted Raft store & root CA material (keeps long-lived keys).
None, by design. tmpfs only: zero-disk dissolution upon task exit.
Model weights and security event store.
80 GB NVMe log buffer & image staging — no app state.
Reachable from
Private mesh only
Private mesh only
Private mesh only, via 5-min cert
Private mesh only
The public internet — the whole attack surface

Threats, and what stops them

Modelled with STRIDE — spoofing, tampering, repudiation, information disclosure, DoS, elevation of privilege.

Spoofing & identity

SSH CA certificates (5–18 min TTL) + Tailscale WireGuard mTLS.

Information disclosure

In-memory masked secret ingest (ingest.py) + single-use self-destructing Vault response wrapping.

Elevation of privilege

AppArmor profiles, drop-all capabilities, and principal restriction inside sandboxes.

If it all burns

Recovery time objective for redeploying network & services from automated playbooks.

< 15 min
Full rebuild, start to service
3 copies — live, local snapshot, offsite
2 media — NVMe and RAID 10
1 offsite cloud bucket, held at arm's length

Gateway Ingress Capacity

Resource allocation and memory headroom on edge node.

Total RAM 1.9 GiB (2.0 GB)

Headroom for TLS 1.3 termination and packet mirroring.

Swap pressure 0 B (Disabled Paging)

Nothing pages — the packet path stays strictly in memory.

NVMe storage 50 GB NVMe SSD

Log buffer and image staging space.

Explore Master Technical Architecture & Index

Click below to access the complete technical workup, security matrix, and subsystem index.