TunnelTug image hub

OCI registry for fleets and product images. Browse architectures (click a card for YAML + Tugconf examples) and open any product’s config builder — scale replicas, link services, or run multiple instances of the same service.

Registry

Host: https://hub.tunneltug.com
Engine: hub.tunneltug.com/tunneltug/engine:latest
Storage: http://134.122.125.220:3085/s3/tunneltug-hub
API /v2/ · Health /_tunneltug/hub/health · Catalog /_tunneltug/hub/catalog

Architectures

Full write-up: docs/ARCHITECTURES.md. Resilient designs (R1–R5) combine HA barges, anycast, multi-PoP kernel mesh, and image integrity.

Resilient designs (quick)

R1 HA tunnel edge — LB + ≥2 k3s barges, heartbeats, optional snapshots
R2 Global anycast — multi-PoP stack + health-gated BGP withdraw
R3 Vhost failover — same public hostname, cut over upstream
R4 Kernel replication — local embeds primary; AddPeer for real-time sync (never prefer-remote-only)
R5 Image integrity — SDF fleet+digest; public pull, authed push

Catalog — configure each image

Click Configure for YAML + Tugconf. Use Review SBOM for the CycloneDX bill of materials published with each barge image. Catalog API: /_tunneltug/hub/sboms.