M7 Siglatch

Control services with encrypted signals.

Siglatch logo

Siglatch is a lightweight encrypted UDP daemon for internal control signals. An authenticated signal can open or close a configured path, trigger a named action, or call a configured handler. It uses a narrow UDP listener for short control messages.

Send a small authenticated signal

Siglatch receives short encrypted UDP control signals on a narrow listener. Accepted requests dispatch the configured handler, so a signal can open or close a path or trigger a named action.

This suits small, bounded machine-to-machine control. The operator defines the action and the handler that receives it.

Open a bounded maintenance path

Use Siglatch with surrounding firewall policy to permit SSH reachability for the current source. A configured handler and the host rules can later close that path, or make an internal admin interface reachable for a bounded maintenance window.

The configured policy defines the scope of the path and the host rules that govern it. Keep access changes tied to the control signal and the surrounding firewall policy.

Dispatch reviewed handlers

Configure handlers for actions such as reload, rotate, notify, or reboot. A signal can also trigger a job, forward a small telemetry or log signal, or call a custom static or dynamic handler.

Review each handler and its privileges for the action it performs. Local handler authorization and safety policy decide what the host may do after it accepts a signal.

Set the policy around each signal

Configure keys, allowed sources, privileges, handlers, host policy, monitoring, and recovery before putting a control path into service. Those choices define who can signal, which action runs, and how operators observe the result.

Stable 1.0 provides encrypted UDP control; 2.0-dev adds multipacket, bidirectional traffic and remains in development.