Platform Architecture

The RasnuCloud Platform

A single control plane for bare-metal fleet management. Built on deterministic state verification and outbound-only WebSockets.

Declarative Operations via AI

Stop memorizing bash commands and digging through StackOverflow. Simply declare your intent in plain English ("Set up Nginx as a reverse proxy for port 3000 with SSL"), and RasnuCloud's AI engine compiles the exact, idempotent operations required to achieve it.

  • Deterministic Planning: The AI verifies the server's current state before generating a single command.
  • Human-in-the-Loop: Destructive commands are paused for manual review before execution.
# Request: Configure swap space
rasnucloud execute "Create a 2GB swap file and enable it on boot"
-> Validating current swap state... None found.
-> fallocate -l 2G /swapfile
-> chmod 600 /swapfile
-> mkswap /swapfile
-> swapon /swapfile
✓ Swap space configured and added to /etc/fstab
rasnucloud-agent-amd64 v1.4.0
15 MB • Outbound WSS • Root Privileges

The RasnuCloud Go Agent

A single, statically compiled Go binary is the only thing installed on your server. It connects to the RasnuCloud Control Plane via a token-authenticated, secure outbound WebSocket.

  • Zero Inbound Ports: Your firewall stays closed. The agent dials out to RasnuCloud, meaning it works flawlessly behind strict NATs or VPNs.
  • Automated Installation: RasnuCloud connects once via SSH to drop the binary and configure the systemd service. No manual scripts required.

Zero-Downtime Migrations

Migrating servers used to be a terrifying, multi-day endeavor. RasnuCloud's Migration Engine automates the entire process from end to end, brokering a secure peer-to-peer connection between the source and destination.

  • Perfect State Cloning: Automatically syncs files, databases (MySQL, Postgres, Redis), and system configurations.
  • Seamless Cutover: RasnuCloud proxies traffic from the old server to the new one while DNS propagates, ensuring literally zero dropped requests.
Migration: AWS-App-Prod → Hetzner-AX41
92% Complete
1. Provisioning Target Server Done
2. Rsync /var/www/html Done
3. Streaming PostgreSQL DB Running (450MB/s)
4. Final Cutover & Traffic Proxying Pending
CPU Usage
99.8%
RAM
4.2GB
Disk I/O
142MB/s

Sub-Second Telemetry

Stop waiting 60 seconds for Datadog to update. RasnuCloud streams live CPU, RAM, Disk I/O, and Network throughput directly from the Linux kernel to your browser in under 50 milliseconds.

  • Process-Level Insights: See exactly which process (down to the PID) is causing a CPU spike in real-time.

Immutable Audit Trail

When a server breaks, the first question is always "who changed what?" RasnuCloud logs every single action taken through the platform, attaching the exact user identity, timestamp, and resulting terminal output.

  • SOC2 Ready: Permanent, unalterable record of all infrastructure modifications.
  • Role-Based Access: Assign team members "Operator" or "Viewer" roles instead of sharing SSH keys.
User Action Time
JD
Jane Doe
systemctl restart nginx 2 min ago
AI
RasnuCloud Auto
Cleared /var/log/syslog 1 hr ago
SM
Sam Miller
apt-get update 1 day ago

Secure by Design.

We built RasnuCloud to manage production infrastructure. That means security cannot be an afterthought—it is the foundational primitive.

Outbound-Only Connectivity

The agent never listens on a public port. It establishes a secure, token-authenticated outbound WebSocket to the control plane. You do not need to punch holes in your firewall.

Encrypted Secrets

All environment variables and SSH keys are encrypted at rest using AES-256-GCM. Decryption keys are rotated automatically and stored in a secure enclave.

Role-Based Access Control

Stop sharing root SSH keys. Invite team members to your organization with granular roles (Viewer, Operator, Admin) and revoke access instantly with a single click.