Welcome to RAVEN. No administrator exists yet — the first account
you create becomes the global administrator for this workspace.
Sign in
Ctrl K
Devices by status
live from the control plane
Network composition
identities & policy
Throughput & enrollment no live data
time-series telemetry is not recorded by this build — axes are shown for layout only, no sample data is drawn
Recent activity
last entries
When
Actor
Action
Target
Draft · —no changes
Focus ·
Computing topology…
Ctrl K
Name
Address
Groups
Last seen
Version
Ctrl K
Reachability & decisions
Source identity
May reach
Owner
Endpoint
Decision
Live output of the zero-trust policy engine: for each Approved device, the peers it may currently reach (first-match policy & both ends approved) from its distributed network map. This is identity-attributed firewall visibility — the same decision the data plane enforces. Per-connection byte-flow accounting exported by the data-plane hub is a separate telemetry stream (not yet wired).
Ctrl K
Name
Active
Sources
Direction
Destinations
Proto & Ports
Default-deny. A connection is allowed only when a matching enabled Allow rule exists; a matching Deny always wins (deny-overrides, independent of row order). These are the live, enforced rules the policy gate (check_access / network map) evaluates. Protocol & port scoping shows ALL — Raven enforces identity-level (L3) reachability; per-port/protocol (L4) filtering is not yet enforced by the control plane.
Ctrl K
Name
Users
Peers
Policies
Routes
Nameservers
Keys
Actions
Ctrl K
Device
OS
Client
Disk enc.
EDR
Signed
Health
Signed device-health claims collected at enrollment.
Ctrl K
Name
Network
Type
High availability
Actions
Ctrl K
Name
Address
Actions
Ctrl K
Relay
Address
Region
Load
RTT
Health
Actions
Model note. Each advertised subnet route is one network; Raven has no nested network → named-resource entity, so the RESOURCES column reports the advertised subnet itself (1), never a fabricated count. Manage these under Network Routing → Routes.
Ctrl K
Network
Resources
Policies
Routing Peers
Exit nodes are routes of kind ExitNode (destination 0.0.0.0/0) — a gateway peer that routes all traffic for the selected groups. Listed from the live route model; manage under Network Routing → Routes.
Ctrl K
Name
Gateway Peer
Routed Range
Distribution Groups
Masquerade
Status
Ctrl K
Name
Target
Domain
Status
No published services
A reverse proxy publishes internal HTTP/TCP services at a public edge. Raven does not implement a reverse proxy in this build — approved peers reach internal services directly over the zero-trust tunnel. Published services would appear here once the capability lands.
not available in this build
Ctrl K
Domain
Service
Verification
Status
No custom domains
Custom domains map a public hostname onto a reverse-proxy service, with DNS verification. Raven does not implement a reverse proxy in this build, so there is no service to map a domain onto. Mapped domains would appear here once the capability lands.
not available in this build
Ctrl K
Cluster
Region
Nodes
Status
No clusters
Edge clusters terminate and forward reverse-proxy traffic. Raven does not implement a reverse proxy in this build, so there are no edge clusters to deploy or manage. Clusters would appear here once the capability lands.
not available in this build
Ctrl K
When
Method
Path
Service
Status
Client
No access logs
Per-request access logs are emitted by the reverse proxy. Raven does not implement a reverse proxy in this build, so no proxied requests are logged. Administrative actions are recorded under Audit Events instead.
not available in this build
Ctrl K
Name
Match Domains
Nameservers
Groups
Ctrl K
Zone
Records
Type
Status
No DNS zones
DNS zones hold authoritative records for internal domains. Raven serves a single flat network-wide zone to approved devices — managed under DNS › Records — and does not implement authoritative multi-zone management in this build. Named zones would appear here once the capability lands.
not available in this build
DNS settings not configurable
NetBird lets you exclude selected peer groups from managed DNS. Raven applies its network-wide DNS zone to every approved device and exposes no per-group DNS configuration in this build, so there is nothing to change here. DNS records are managed under DNS › Records.
not available in this build
Ctrl K
Tenant ID
Name
Actions
Ctrl K
Name
Role
Status
Groups
Last login
Actions
Ctrl K
Name
Role
Status
No service users
Service users are machine accounts that hold scoped API tokens instead of a password login. This Raven build has no service-user entity — every account in the control plane is a human identity. When machine accounts land, they will appear here.
not available in this build
Ctrl K
Setup keys
Name & Key
Usage
Last used
Groups
Expires
Pending device-code enrollments
RFC 8628 — approve a headless device out of band
User code
Device
Name
Status
Action
Ctrl K
Ctrl K
signed security events, newest first
When
Severity
Device
Source
Rule
Evidence
No security alerts
Signed security events raised against your network will appear here, newest first.
Identity Provider Sync
Single Sign-On
Event Streaming
MDM & EDR
Identity Provider Sync
Provision users and groups automatically from an external identity provider such as Google Workspace, Microsoft Entra ID, Okta or JumpCloud. This is a NetBird-cloud integration and is not available in this Raven build — users and groups are managed directly in the control plane.
cloud-only · not available in this build
Single Sign-On
Federate admin-console login through an external SSO provider. This is a NetBird-cloud integration and is not available in this Raven build — the console authenticates administrators locally with Argon2id password sessions.
cloud-only · not available in this build
Event Streaming
Forward audit and security events to an external SIEM or webhook endpoint such as Splunk or Datadog. This is a NetBird-cloud integration and is not available in this Raven build — signed events are retained in the control plane and shown under Audit Events and Security alerts.
cloud-only · not available in this build
MDM & EDR
Gate access on device health reported by an MDM/EDR vendor such as CrowdStrike, Microsoft Intune or SentinelOne. This is a NetBird-cloud integration and is not available in this Raven build — Raven collects its own signed device posture at enrollment, shown under Posture Checks.
cloud-only · not available in this build
Authentication
Administrators
Groups
Permissions
Networks
Clients
Metrics
General
Danger zone
Mock data. Authentication settings reproduced from NetBird; not wired to the Raven control plane — toggles are display-only.
Session expiration
Require peers to re-authenticate after a period of inactivity (default 24 hours).
Require login after disconnect
Peers must authenticate again each time they reconnect to the network.
Mock data. Group settings reproduced from NetBird; not wired.
JWT group sync
Propagate groups from your identity provider's JWT claims onto peers.
Mock data. Permission settings reproduced from NetBird; not wired.
Regular users can view peers
Allow non-admin users to list the peers in the network.
Regular users can create setup keys
Allow non-admin users to mint their own enrollment keys.
Preview. This pane mirrors NetBird's layout; these controls are not yet wired to the Raven control plane, so no live values are shown.
Networks
overlay addressing
DNS domain
not exposed in this build
Network range
not exposed in this build
IPv6 network range
—
Routing peer DNS resolution
Resolve DNS for routed networks through the routing peer.
Mock data. Client settings reproduced from NetBird; not wired.
Enable lazy connections
Clients establish peer connections on demand instead of eagerly.
Enable peer expose
Allow selected peer groups to expose services to the network.
Reject hostname collisions
Refuse enrollment when a peer's hostname already exists.
Mock data. Usage metrics reproduced from NetBird; not wired.
Anonymous usage metrics
Share anonymous aggregate usage data to help improve the product.
General
control-plane status
Control plane
—
Admin API
loopback (reverse-proxied)
Session
active
Administrators
Username
Role
Danger zone
irreversible actions
No destructive control-plane actions are exposed in this build.