An enterprise secure-access platform for managing VPN, proxy, users, nodes, usage limits and connectivity infrastructure from one central console.
Ravix Access is a control plane for enrolling, bootstrapping, and monitoring access-gateway nodes. Its stack is a Go (Chi router) API, a bilingual Next.js dashboard (Persian by default), PostgreSQL, Redis, and NATS JetStream. Phase 1 builds the foundation — authentication, RBAC, node lifecycle, and an internal PKI. WireGuard/Xray tunneling, multi-tenancy, and billing are on the roadmap for later phases and are deliberately not part of this stage.
Securely bringing up a new access node usually means manually issuing certificates, configuring SSH, and tracking its status by hand. At any real scale, without an internal PKI and RBAC layer, separating roles (admin, operator, support) and tracing who changed what becomes hard to manage.
Ravix Access builds an internal CA that automatically issues mTLS certificates to every node. Node enrollment runs through a Bootstrap Worker (a NATS consumer with a gRPC mTLS client) and a one-time token, and each node's Agent sends a heartbeat every 15 seconds. Seven predefined roles (from super_admin to customer), Argon2id hashing, JWT with refresh-token rotation, rate limiting, and full audit logging make up this phase's security layer.
Live
A Private Cloud management platform that turns VMware and vCenter infrastructure into a self-service, multi-tenant, controllable cloud.
Live
A complete enterprise SMS platform with a smart send panel, an auto-reply SMS assistant, support ticketing, a public API, billing, and a background processing engine.
Live
An AI-powered website builder that turns a business idea or requirement into a publish-ready website in minutes.
