Features
Visit the pricing page for the latest information on pricing.
| Plan | Certificate Rotation | Custom Device Names | Envoy | Device Blocking | Health Monitoring |
|---|---|---|---|---|---|
| Free | ✗ | ✗ | ✗ | ✗ | ✗ |
| Basic | ✗ | ✗ | ✗ | ✗ | ✗ |
| Standard | 3 months | ✓ | ✗ | ✗ | ✗ |
| Pro | Configurable | ✓ | ✓ | ✗ | ✗ |
| Unlimited | Any | ✓ | ✓ | ✓ | ✓ |
Feature Descriptions
Certificate Rotation
Certificate rotation is the process of automatically replacing a device's certificate with a new one. This is important for security reasons:
- It ensures that a device's certificate is not compromised over time.
- It allows for quicker deprovisioning of devices. If a device is deleted from the dashboard, its certificate will still be valid and able to access your Mesh network until it expires. Quicker certificate rotation means quicker deprovisioning, and lower likelihood of a device being able to access your network after it has been deleted.
DNS
DNS allow you to assign custom names to your devices in the Mesh network and resolve them using standard DNS queries. For example, you could use http://your-custom-name:8080. This allows:
- Custom DNS names that are easy to remember and make sense to you.
- Easier identification of devices on your network.
Without DNS your device is assigned a random IP.
# Without DNS
ping 100.76.143.1
curl http://100.76.143.1/hello-world
# With DNS
ping your-device-name
curl http://your-device-name/hello-worldHealth Monitoring
Health monitoring allows you to monitor the status of your devices in real-time, and receive alerts when a device goes offline or a container running on your device crashes.
Envoy
Envoy is a self-hosted redundancy service designed to help you fully harness the reliability of decentralised infrastructure. Across all our plans, your devices communicate directly with each other via a Mesh Network, without routing traffic through our servers. However, our servers are still required for bringing devices online and enabling them to discover other devices within your network.
To ensure security and reliability we provide multi-region, high-availability services for seamless operation. We are however, very committed to the principle of decentralisation. Subsequently, we provide Envoy, a self-hosted redundancy node that can be used to allow devices to come online and enable them to discover other devices within your network, even if our servers are down. You still benefit from our servers, but also an additional self-hosted node for added reliability. We have no access to your Envoy instance, and it is fully under your control.
Device Blocking
In the certificate rotation section, we mentioned that quicker certificate rotation means quicker deprovisioning of devices. However, sometimes you may want to block a device from accessing your network immediately without any delay, or use longer certificate periods while still benefiting from quick device deprovisioning. This is where device blocking comes in. With device blocking, you can send instructions to all the devices on your Mesh network to immediately disconnect and block a device certificate from accessing your network. You are then safe to immediately regenerate a new certificate with the same IP address to reprovision your device.