01 · Your brand
Your domain. Your logo. Your CSS.
Subdomain or custom domain on your name. Upload a logo, set a palette, override CSS — your customers never see ours.
yourname.velanox.nl
02 · Auth & security
JWT, bcrypt-12, AES-256-CBC.
Refresh tokens persisted to DB, 100/15min global rate limit, 10/15min on auth endpoints.
production guard ON
03 · Licensing
Trial, Standard, Unlimited, Custom.
Per-company site & user caps enforced at API. 14d / 3d expiry warnings. Global override.
renews · 47d
04 · Monitoring
60s polling. Cloud or self-hosted.
Devices, clients, VLANs, WiFi networks (per-AP stats), WAN. Time-series for charts.
uplink: 2.4 Gb/s
05 · VPN
Hub & spoke per company.
10.8.{n}/24 users, 10.9.{n}/24 sites. EasyRSA cert gen. .ovpn emailed automatically.
AES-256 · OpenVPN
06 · Templates
Pull from one site, push to many.
Wizard for network / WiFi / WAN / all. Async background apply. Auto-applied on first VPN.
applied: 14 sites
07 · Job queue
DB-backed worker · 10s tick.
VPN, nginx, template apply. Up to 3 retries. Maintenance every 6h prunes old data.
queue: 0 pending
08 · Permissions
Roles + assignments + overrides.
3-layer RBAC. Site access scoped: all / specific / none. Sane defaults out of the box.
Network Engineer
09 · API & webhooks
Scoped keys. Signed payloads.
X-API-Key header. SHA-256 hashed at rest, shown once. HMAC-SHA256 webhook signatures.
X-API-Key