1. Introduction
1. Introduction
1.1 Problem Statement
Services are distributed across multiple VPS hosts and require secure inter-host communication. Using public IPs for service connectivity increases exposure and operational risk. Existing ad-hoc tunnels are brittle and inconsistent.
1.2 Motivation and Goals
The architecture must provide:
- Encrypted host-to-host communication.
- Predictable addressing for service discovery.
- Clear separation between private service traffic and public ingress.
1.3 Scope and Boundaries
This RFC defines the host-level private networking architecture. It does not define service-specific runtime configuration, application-level security controls, or orchestration overlays.
End of Introduction — RFC-WG-0002