Agent and daemon
The Linux MeshAgent handles enrollment and Control synchronization. MeshDaemon loads the verified configuration, opens the UDP/TUN dataplane, manages peer sessions, and reconciles policy. The packaged service name is dvemesh-agent.service.
Topology and ACL
Control-managed topology supports FULL_MESH and SELECTIVE modes. SELECTIVE carries an authorized neighbor set which constrains outbound and inbound sessions, reconnect, NAT, and relay paths. ACL administration is network-scoped; packet policy defaults to DENY and is distributed to agents in configuration snapshots.
Dataplane
The Linux IPv4 dataplane validates packets, evaluates ACL, selects direct peers or learned next hops, and supports bounded transit envelopes. Route advertisements include path/hop information; loops are rejected, learned routes expire, and routes through a lost peer are removed. These mechanisms exist in source and tests, but three-host WAN delivery has not been verified.
NAT and relay
DVeMesh includes UDP endpoint discovery, rendezvous, signed probes, hole punching, and a separate ciphertext relay transport. Live external relay service availability is not established; the production configuration described in component documentation has an empty relay list.
Status boundary
Some component documentation in the repository predates later implementation phases and contradicts current source. This portal gives priority to the current code paths and the focused Installer/Control/daemon documents. It does not claim a stable external product release.