Federated, not out of control
summary
Element ships a secure border gateway (SPG) written in Rust, stateless and cloud‑native so it scales into Kubernetes and can handle millions of users, and an inspect‑and‑modify cross‑domain gateway (CDG) blueprint for air‑gapped high‑security networks. SPG runs as a pipeline proxy with pluggable rule modules, integrates into the Element Server Suite admin console, enforces allow/deny federation lists, and implements gematik’s three‑step invite permissions, sidecar logic and audit reporting. Both products are deployed by customers and are reported to work in production.
AI-written summary · about
chapters (14)
- 0:00Introduction to federated control
- 1:07Challenges in public Matrix federation
- 3:16Threats and risks in open federation
- 5:49Secure Border Gateway concept
- 6:53How SPGs work in detail
- 10:01Scalability of SPGs
- 11:26Configuring closed federation
- 12:28SPG capabilities and future plans
- 15:14Cross-domain gateways explained
- 18:28Gematik use case overview
- 20:34TI Messenger backend integration
- 23:05Future vision for SPG and CDG
- 26:38Summary and compliance tools
- 27:19Q&A on proprietary nature
related talks
45mArchitecting a Global Multi-Tenant Application Composition Platform
28mMagma Abstractions and Interfaces A Systems Approach to Access Networks
15mMixed safety orchestration with AosEdge
32mFine-Grained Policies RBAC with NGAC
20mHelp Protect Your Data Centers with Safety Constraints
21mDDD and FSM: tackling complexity with state machines
34mGrid Enhancement Platform: Operationalizing Open Source for Real-Time, Risk-Aware Gri...
43mBuilding a Chain With