LIVE GOOGLE CLOUD & VPC ARCHITECTURE GRAPH (
main-ctrlgrid • us-central1)
VPC TLS 1.3 DB (
10.128.0.2:3306) Edge HTTPS
GCS Bucket I/O
Secrets & AI
LIVE VPC & INTER-SERVICE COMMUNICATION STREAM (FROM
0 events
ctrlgriddb)
| UTC Time | Source Node | Target Node | Protocol / Channel | Event | Latency | Payload | Details |
|---|
REAL-TIME VPC BANDWIDTH, DB QPS & CPU TELEMETRY
5s Resolution
VPC
ens4 Throughput (KB/s)
0.0 KB/s
MariaDB 11.8 Queries / Sec & Conns
0.0 QPS
ctrlgriddb CPU & RAM Load (%)
0%
Cloud Run Fleet Avg Latency (ms)
0 ms
ANDROMEDA VPC SUBNET TOPOLOGY (
us-central1
default • 10.128.0.0/20)
Active Ephemeral Cloud Run Container IPs on VPC (
10.128.0.x)
ctrlgriddb Network Interfaces (/proc/net/dev)
GCP VPC FIREWALL, HOST UFW & FAIL2BAN INTRUSION PREVENTION
ENFORCED
Google Cloud VPC Firewall Rules (
main-ctrlgrid)| Rule Name | Dir / Priority | Source Ranges | Allowed Protocol | Target Tags |
|---|
ctrlgriddb Host UFW Rules & Fail2ban Jail (sshd) SSH Port 22 Hardware & Firewall Gate (Zero-Downtime via VPC DB Control)
PORT 22/TCP INGRESS & SYSTEMD
sshd DAEMONChecking SSH status...
Controlled over Direct VPC TLS 1.3 (
10.128.0.2:3306) — disabling SSH blocks all external port 22 brute-force attacks without affecting this console.
LIVE KERNEL TCP SOCKETS ON
0 active
ctrlgriddb (ss -tnp state established)
| Local Endpoint | Peer Endpoint | Zone | Protocol | Channel | Recv-Q / Send-Q | Process |
|---|
LIVE MARIADB
0 threads
information_schema.PROCESSLIST
| Conn ID | DB User | VPC Client IP:Port | Schema | Command | Time | State / Active Query |
|---|
DEPLOYED GOOGLE CLOUD RUN SERVICES (
7 Production Services
us-central1 • GEN2 EXECUTION ENVIRONMENT)
GOOGLE CLOUD STORAGE (GCS) BUCKETS & LIVE OBJECT TELEMETRY
Audited via GCE devstorage.read_only
ctrlgriddb SSH GATE, UBUNTU UPDATES, LIVEPATCH & REBOOT GO-AHEAD CONTROL CENTER
SSH: ENABLED
UNATTENDED: ACTIVE
0 Updates
1. SSH Port 22 Defense Control (Anti-Brute-Force Gate)
CURRENT SSH (22/TCP) & UFW POSTURE
UFW LIMIT IN • sshd active
Disabling SSH closes port 22 at UFW and stops
sshd. Because this console communicates over VPC MariaDB TLS 1.3 (10.128.0.2:3306), you can re-enable SSH here anytime.
2. Unattended-Upgrades & Ubuntu Livepatch Posture
UNATTENDED-UPGRADES DAEMON
ACTIVE (Security + Updates)
Auto-Reboot is disabled so reboots always wait for your manual Go-Ahead.
UBUNTU LIVEPATCH & KERNEL
canonical-livepatch v11.1.0
Kernel:
7.3.0-1003-gcp 3. System Restart Requirement & Go-Ahead Approval
REBOOT REQUIREMENT STATUS (
/var/run/reboot-required)No Reboot Required — System Running Cleanly
Packages requiring restart: None
4. Pending APT Package Updates (0)
| Package | Current Version | New Version | Channel |
|---|---|---|---|
| Checking package state... | |||
LIVE APT & SYSTEM OPS CONSOLE LOG
IDLE
Ready.
ctrlgriddb MASTER SERVER OS & MARIADB 11.8 INTERNALS
MARIADB ACCOUNT & TLS 1.3 ENFORCEMENT AUDIT (
require_secure_transport=ON
mysql.user)
| DB User | Allowed Host / Subnet | Auth Plugin | TLS Requirement |
|---|
Database Schemas Overview
CROSS-DATABASE TABLES (
Tap Inspect to view live rows
weather_system, ctrlgrid_sites, ctrlgrid_admin)
| Schema | Table Name | Engine | Rows | Data / Index KB | Updated | Action |
|---|
LIVE TABLE ROW & SCHEMA INSPECTOR
Select a table
Tap Inspect Rows on any table to query its live schema and latest 25 sanitized records directly from ctrlgriddb over TLS 1.3.
ACTIVE ADMIN VAULT SESSIONS & PANIC REVOCATION
| Session ID | Client IP | Last Seen | Expires | Action |
|---|
Brute-Force IP Lockout Registry (
admin_lockouts)| IP Address | Failed Attempts | Status | Action |
|---|
ROTATE ZERO-TRUST ADMIN VAULT CREDENTIALS
PBKDF2-HMAC-SHA256 (310,000 iters)
FORENSIC SECURITY AUDIT LOG (
0 entries
ctrlgrid_admin.admin_audit_logs)
| ID | UTC Timestamp | Severity | Event Type | Actor IP | Details | User-Agent |
|---|
