Services

Per-service configuration and operation. Each service is a separate process with its own identity, state directory, and service account where its protocol requires them.

• Relay and AutoNAT Infrastructure — stateless transport relay and reachability probing. Stores no vault data.
• Rendezvous Service — epoch-scoped peer discovery for cross-network sync.
• Device Pairing — signed invite/join/acceptance over the encrypted pairing rendezvous, with the self-hosted and serverless backends.
• Optional Mailbox Service — short-lived encrypted head hints for devices that are not online at the same time.
• Optional Object Storage Service — immutable epoch-encrypted objects and advisory signed head publications.

Related: Guide for hosting these services together, and the Networking Design for their trust boundaries.