RelayGate deployed on customer hardware. No outbound callbacks, local secret store, signed offline upgrades. Run the same binary inside the perimeter.
## airgapped install
scp relaygate-v1.4.0-linux-amd64.tar.gz customer:/opt/
scp relaygate-v1.4.0-linux-amd64.sig customer:/opt/
# on the customer host
tar xzf relaygate-v1.4.0-linux-amd64.tar.gz
relaygate verify --sig relaygate-v1.4.0-linux-amd64.sig
relaygate config apply --file /etc/relaygate/config.yaml
systemctl enable --now relaygate
# airgap.yaml
mode: airgap
telemetry:
outbound: false # no calls to managed observability
receipts:
destination: local_fs
path: /var/log/relaygate/receipts/
secrets:
backend: local_vault
path: /etc/relaygate/vault
upstreams:
- id: primary
driver: openai-compatible
base_url: http://vllm.internal:8000
Every receipt lands in a local append-only store. Prometheus scrapes the local metrics endpoint; traces export to the customer's internal OTLP collector. No data leaves the perimeter.