Agent Configuration

The MoeNet Agent is configured via a JSON file with the following sections.

Modes

Bootstrap Mode (Recommended)

Minimal config — the agent fetches remaining settings from the Control Plane at startup:

{
  "controlPlane": {
    "url": "https://api.moenet.work",
    "token": "your-agent-token"
  },
  "server": {
    "listen": ":24368"
  }
}

Bootstrap automatically fetches: node ID, region, loopback IPs, ASN, mesh peers, iBGP peers.

Full Configuration

See below for all available sections.

Configuration Sections

server

{
  "server": {
    "listen": ":24368",
    "readTimeout": 30,
    "writeTimeout": 30,
    "idleTimeout": 120
  }
}

Field	Type	Default	Description
listen	string	:24368	HTTP listen address
readTimeout	int	30	Read timeout (seconds)
writeTimeout	int	30	Write timeout (seconds)
idleTimeout	int	120	Idle timeout (seconds)

node

{
  "node": {
    "name": "jp-edge",
    "id": 1,
    "region": "ap-northeast",
    "location": "Tokyo",
    "provider": "Vultr"
  }
}

INFO

In Bootstrap mode, name is the only required field. Other fields are fetched from the Control Plane.

controlPlane

{
  "controlPlane": {
    "url": "https://api.moenet.work",
    "token": "your-agent-token",
    "requestTimeout": 15,
    "heartbeatInterval": 30,
    "syncInterval": 60,
    "metricInterval": 60,
    "maxRetries": 3,
    "retryInitialDelay": 1000
  }
}

Field	Type	Default	Description
url	string	required	Control Plane API URL
token	string	required	Agent authentication token
requestTimeout	int	15	HTTP request timeout (seconds)
heartbeatInterval	int	30	Heartbeat interval (seconds)
syncInterval	int	60	Session sync interval (seconds)
metricInterval	int	60	Metric report interval (seconds)
maxRetries	int	3	Max retry attempts
retryInitialDelay	int	1000	Initial retry delay (ms)

bird

{
  "bird": {
    "controlSocket": "/var/run/bird/run/bird.ctl",
    "poolSize": 5,
    "poolSizeMax": 64,
    "peerConfDir": "/etc/bird/peers",
    "ebgpConfTemplateFile": "/opt/moenet-agent/templates/ebgp.conf.tmpl",
    "ibgpConfDir": "/etc/bird/ibgp.d"
  }
}

Field	Type	Default	Description
controlSocket	string	/var/run/bird/run/bird.ctl	BIRD control socket path
poolSize	int	5	Connection pool initial size
poolSizeMax	int	64	Connection pool max size
peerConfDir	string	/etc/bird/peers	eBGP peer config directory
ebgpConfTemplateFile	string	—	eBGP config template path
ibgpConfDir	string	/etc/bird/ibgp.d	iBGP config directory

wireguard

{
  "wireguard": {
    "privateKeyPath": "/etc/wireguard/private.key",
    "publicKeyPath": "/etc/wireguard/public.key",
    "configDir": "/etc/wireguard",
    "persistentKeepaliveInterval": 25,
    "dn42Ipv4": "",
    "dn42Ipv6": "",
    "dn42Ipv6LinkLocal": "fe80::1"
  }
}

WARNING

MoeNet Agent uses direct kernel WireGuard interface management. Do NOT use wg-quick.

metric

{
  "metric": {
    "pingTimeout": 5,
    "pingCount": 4,
    "pingWorkers": 32
  }
}

autoUpdate

{
  "autoUpdate": {
    "enabled": true,
    "checkInterval": 60,
    "channel": "stable",
    "githubRepo": "heichaowo/moenet-agent"
  }
}

Field	Type	Default	Description
enabled	bool	true	Enable auto-update
checkInterval	int	60	Check interval (minutes)
channel	string	stable	Release channel: stable, beta, dev
githubRepo	string	heichaowo/moenet-agent	GitHub repository for releases

Control-Plane controlled

The Control Plane sends enabled to every agent in its config response, so auto-update is normally toggled centrally — set AGENT_AUTOUPDATE=false on the Control Plane to disable it fleet-wide (e.g. when pinning a custom binary, which the stable updater would otherwise revert). The updater verifies the downloaded binary's SHA256 against the release's SHA256SUMS and refuses to install on a mismatch.

BGP Policy (from the Control Plane)

The agent does not hardcode BGP parameters — it fetches a policy from the Control Plane (GET /api/v1/agent/:node/bird-config) and renders BIRD from it:

• local as for both eBGP (dn42_peer) and iBGP (dn42_internal) comes from the policy's DN42 ASN.
• RPKI servers are rendered from the policy's rpkiServers list (with a fallback to rpki.akae.re if empty).

This means a deployment can run its own ASN and RPKI sources purely by editing the bird_policies row on the Control Plane — no agent rebuild required. See Deployment → First Run.

Full Example

See config.example.json for the complete configuration file.