InfraGuard

Operations Policy

Global decisions stored in infr_setting(group=ops) and read via OpsPolicy — collect mode, thresholds, currency, monitored ports, internal networks, auto-block switch.

Overview — what it does

Administration ▸ Operations Policy is the global settings that codify hardcoded values. Stored in infr_setting (group='ops') and read via App\Support\OpsPolicy (60s cache · DEFAULTS fallback).

Layout · key settings

Setting Meaning
DB auto-collect mode economy (only when a console user is present · default) / always. Presence is recorded by InfrAuth
DB status thresholds db_degrade_{conn_pct,running,waiting,slow_qps} → DbCollectorService::statusOf
Currency KRW/USD/JPY/EUR/CNY/GBP → Hardware cost display
Traffic monitored ports CSV → drives the Port/IP Connections cards & chips
Internal-network whitelist IP · prefix · CIDR → SecurityScope self-net exclusion + "internal" badge
Auto-block switch Security tab · master toggle for scheduler auto-blocking (default OFF)

How to use

Change a value and save; it applies from the next request. Manage internal ranges via the [+ Add range] modal; registered-instance /24 prefixes show as auto-detected badges. Saving calls SecurityScope::flush().

Access

level≥10 (admin) + audit.

Related

Global operations policy
Global operations policy