Skip to content

blog: authenticated relays for Iroh Services#508

Draft
okdistribute wants to merge 1 commit into
mainfrom
rae/blog-authenticated-relays
Draft

blog: authenticated relays for Iroh Services#508
okdistribute wants to merge 1 commit into
mainfrom
rae/blog-authenticated-relays

Conversation

@okdistribute

Copy link
Copy Markdown
Contributor

Draft blog post announcing that managed relays are authenticated by default.

Covers:

  • why a paid relay allocation needs access control (open door / capacity + metering)
  • the Authorization: Bearer capability-token model: issuer = project API key, audience = the connecting endpoint's public key, grant = relay use only, plus expiry
  • the security properties (leaked URL is useless; leaked token is useless without the endpoint's secret key; revocation via API-key rotation)
  • connecting via the iroh_services::preset() builder
  • disabling auth per project for intentionally-open relays
  • what's next (single shared multi-tenant relay endpoint)

Post is marked draft: true in frontmatter, so it won't surface on the live blog until that's flipped. Publish date is a placeholder (2026-07-23), adjust before merge.

🤖 Generated with Claude Code

Draft post announcing that managed relays are authenticated by default,
covering the bearer-token capability model and the iroh_services preset.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@vercel

vercel Bot commented Jul 23, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
iroh-computer Ready Ready Preview, Comment Jul 23, 2026 10:11pm

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: 🚑 Needs Triage

Development

Successfully merging this pull request may close these issues.

1 participant