Skip to content

Exordos NAC#

Exordos NAC binds a registered device identity to a network address, evaluates its access policy and sends short-lived grants to a Linux gateway. The gateway applies those grants to forwarded traffic with nftables. VPN and wireless connectivity remain the responsibility of the existing network infrastructure.

Documentation#

  • Architecture — components, trust boundaries, policy and network requirements.
  • Protocol — broker and agent API, certificates, errors and attestation.
  • Deployment — broker, enforcement gateway, device enrollment and operations.
  • Verification — test suites and integration stands.
  • macOS — Secure Enclave identity and platform-specific deployment constraints.

Repositories#

Repository Contents
exordos_nac Broker, policy engine, protocol fixtures and this documentation.
exordos_nac_agent Go endpoint and gateway agent, broker stub and testbed.