Skip to content

VPN

Purpose

Optional VPN module for managed remote access sessions with real-time status in Cloud SPA.

Boundaries

Licensed optional module — requires feature flag on Backend and Frontend deployments.

Key components

Layer	Path
Backend	`Backend/internal/domain/vpn/`
WebSocket	`/api/ws/vpn`
Frontend	VPN UI routes

Flow: session status push

sequenceDiagram
    participant Client as VPN client
    participant API as Cloud Backend
    participant WS as WebSocket
    participant SPA as Cloud SPA

    Client->>API: Session lifecycle API
    API->>WS: Session state change
    WS->>SPA: Live session update

Debug scenarios

Issue	Check
Module missing in UI	`FEATURE_*` env on Frontend; tenant license features
WS disconnects	Same JWT/WebSocket patterns as Security