Network Surfaces
GuardianMesh publishes three core public surfaces and one guardian seed set.
www.guardianmesh.ca: infrastructure docs and onboardingapi.guardianmesh.ca: directory, telemetry ingest, reliability feedsmap.guardianmesh.ca: public-safe network map and node viewg1/g2/g3.guardianmesh.ca: websocket relay endpoints
Transport Types
GuardianMesh supports seven transport types for reaching the network, plus gateway adapters for non-IP environments:
- Guardian (WebSocket Relay) — Primary path via Noise XX authenticated WebSocket to relay nodes. Internet required.
- BLE Mesh — Multi-hop Bluetooth Low Energy mesh (3 hops default). No internet required. Automatic fragmentation, offline queue (500 messages), Ed25519 identity verification.
- WebRTC — Direct peer-to-peer via ICE/STUN data channels. Internet required for signaling, then direct.
- Tor — Anonymous transport via SOCKS5 proxy with circuit management and pluggable transports (obfs4, meek). Internet required.
- LAN — mDNS Zeroconf discovery on local networks. No internet required.
- Satellite — Gateway for satellite uplink/downlink. No terrestrial infrastructure required.
- Sneakernet — QR code (HMAC-SHA256 verified) and file transfer for USB/SD card. Fully offline.
- Radio — HF/VHF gateway for long-range communication. No network infrastructure required.
The adaptive transport scorer automatically selects the best available path based on latency, reliability, and availability.
Authenticated Portals
In addition to the public surfaces above, GuardianMesh operates authenticated portals for internal administration:
admin.guardianmesh.ca— Operator administration dashboard (JWT + optional TOTP 2FA)corporate.guardianmesh.ca— Shareholder portal (separate JWT secret)employee.guardianmesh.ca— Employee self-service portalinvest.guardianmesh.ca— Investor portal for share offerings and KYC