Registry & High Availability
Live topology visibility for controllers, control-planes, and clients, plus leader election and multi-controller HA.
Authentication & Access
The Owner/Admin/Editor/Viewer role model, project scoping, API/discovery/OpenRouter tokens, LDAP/AD integration with connection and auth tests, and TOTP two-factor authentication.
Threat Intelligence & GeoIP
Upload threat feeds and GeoIP MMDB databases to enrich API Discovery with reputation and location context.
AI-Powered Analysis
Bring your own OpenRouter key to analyze Envoy configurations and logs with the model of your choice — with full token, cost, and quota tracking.
Licensing
View, activate, re-validate, and remove license keys, and the egress the license API requires.
Backup & Restore
Export and re-import a project's platform state, validate a backup before applying it, inspect backup metadata, and clean up resources for a retired Envoy version.
Cloud & OpenStack
Register an OpenStack cloud, discover a VM's network interfaces and subnets, and bind an edge Envoy node's downstream IP to an OpenStack port.
Your Profile
Self-service account management in Elchi — change your email and password, and enable or manage two-factor authentication for your own account.
Security Model
Elchi's security posture in one place — identities and secrets, per-wire trust, RBAC and audit as controls, hardening, and what is encrypted or at rest.
Settings & the General Tab
An orientation to the Settings area — the full tab set with links to each feature's doc, and the General tab's version hero and live storage-usage card.
Sizing & Capacity
Per-component resource guidance for an Elchi platform — control plane, MongoDB, ClickHouse, VictoriaMetrics, collector, and the shield sidecars — anchored to the Helm chart defaults, with a "what grows with what" model for planning capacity.
Production Checklist & DR
A go-live checklist tying together TLS, HA, persistent datastores, hardening, monitoring, backups, and shield source-IP trust — plus a disaster-recovery runbook grounded in Elchi's restart-safe, last-good config behavior.