Skip to content

Gateway and VPN

The gateway is the operator dashboard for a programmed Kaonic 1S. Reach it after first boot: open http://192.168.10.1/ on the management LAN (Wi-Fi AP or USB Ethernet). Restrict that LAN to authorised operators.

  • Process: kaonic-gateway after kaonic-commd
  • HTTP bind default 0.0.0.0:80, redirect to HTTPS on 443
  • Connects to kaonic-commd at 192.168.10.1:9090 unless overridden
  • 30 s radio keepalive ping

Pages

Home

High-level status: system health, running services, network ports, VPN connectivity, and radio-module modulation.

Radio

Monitor and configure the two RF modules (Radio A and Radio B), including sub-GHz and 2.4 GHz settings and RX/TX packet counts. Change frequency and power only with antennas fitted. The Test control sends a short text frame on the selected module so two units on the same channel plan can confirm they hear each other. Defaults and operator rules: radio profiles.

Reticulum

Mesh layer: local identity, destinations, and links. Packets route by cryptographic destination. Peer policy: mesh and identities.

VPN

Tunnel address, WLAN (and USB) address, this unit’s radio destination hash, and connected peers. Use this page to add peers and diagnose the TUN. Details below.

Plugins

Install, update, enable, disable, and remove plugins. Custom plugins follow the same package layout. See application updates.

Network

Switch Wi-Fi between access-point and station mode, and list active interfaces. Station mode may move the board off 192.168.10.1. See power and Wi-Fi.

Media

Audio cards (levels, mute, test) and camera / video sources attached to the board.

System

Hardware summary, software version, serial, hostname, and system diagnostics. Download the device CA here if the browser does not trust the HTTPS certificate. Reboot from this page when the UI offers it.

VPN

kaonic-vpn:

  • Linux TUN
  • Default transit net 10.20.0.0/16 (Config.toml)
  • Peer IPs derived from destination hashes
  • Extra advertised route example: 192.168.10.0/24
  • Announces every 5 s; routes expire ~45 s; conflicting claims dropped
  • /24 LANs may be aliased into 192.168.100.0/24–192.168.254.0/24

Enable IP forwarding as required on the board if you are routing beyond the TUN. IPMasquerade is commented out on br0 by default.