IO orchestrates lightning-fast, zero-overhead hosting stack automation directly on your Ubuntu servers, backed by sandbox-secured AI operators that automatically detect, repair, and deploy your services.
Traditional control planes are bloated, slow, and completely blind to AI. IO reinvents the control plane from the bare metal up.
Manage your entire bare-metal cluster and initiate secure, multi-agent diagnostics inside our terminal fleet suite.
Real operator flow: archive the tree with --prepare,
SSH-bootstrap a fresh box with --provision,
then stage the full stack offline-first.
Prepare source trees in seconds, automate SSH provisioning, and deploy the entire multi-application host stack using optimized, offline-cached packages.
./bin/io --prepare /path/to/io.app
./bin/io --provision 203.0.113.10 '…'
sudo ./io --install http://…/latest
Twist our responsive dials to balance security rates, FPM performance pools, and AI agent token allowances. Watch readouts compile in real-time.
Define request constraints and geofence hardness rules on Nginx before traffic hits PHP.
Dynamically balance processes and memory limits allocated per virtual host directory.
Assign safe computational thresholds, pricing limits, and tool execution bounds to active AI operators.
The IO Firewall intercepts requests in real-time. Watch allowed flows (Cyan) bypass the perimeter while suspicious threats (Red) detonate harmlessly against the shield.
Instantly isolate threat actors. Direct integration with Linux kernel ipset lists allows the firewall to drop hostile traffic before it
reaches Nginx or FrankenPHP, saving 100% of app CPU cycles.
Geofence your server with one click. Block entire geographic regions or threat-heavy routing origins (e.g. block CN, RU) at the edge, redirecting or dropping requests immediately.
Guard against brute-force and rapid scrapes. Apply strict Nginx rate limits alongside L4 connlimit policies to restrict the maximum
concurrent sockets permitted per IP or CIDR block.
Real-time network bookkeeping. Powered by the ipnet collector daemon, IO monitors Rx/Tx bytes, packet counts, active ports, and service
signatures per IP peer without introducing hypervisor latency.
IO aggregates full-spectrum interface bandwidth, active TCP socket statistics, and edge Nginx HTTP log streams in real-time. See exactly how we analyze and trace every byte on the wire.
Direct hardware bandwidth analysis. Measures actual throughput (Mbps) and packet rates (PPS) directly from the interface card using optimized OS metrics.
Go-compiled connection accountant. Runs as a background daemon to analyze active TCP/UDP pipes, Rx/Tx byte rates, destination ports, and syncing state to DB.
Continuous Edge L7 stream auditing. Tails active upstreams to report request rates, response times, caching metrics, and client info in real time.
Track transactional heartbeats, map database nodes, monitor replicas, and synchronize primary-replica writes across your entire cluster at microsecond speeds.
SSL apply, stack actions, backups, deploys — workers pick them up; you watch electrified progress.
Define metrics-driven triggers that monitor CPU pool saturation, latency thresholds, and queue backlogs. Automatically execute scaling actions, IP bans, or worker restarts.
Git-native hosting with automated deploy keys, webhooks, and post-deploy orchestration.
Git bare repositories with custom SSH access control lists are provisioned automatically. Every commit push triggers sub-10ms atomic webhook deployments, reloading pools cleanly.
Deploy secure, multi-provider agents bound to strict system rules. Complete with isolated tool registries, context skills, knowledge directories, and real-time live turn streaming.
Class-backed, secure execution pathways that only run authorized commands.
Spawn nested, asynchronous child sub-agents over Relay with zero context pollution.
Isolated sandboxed directories containing local file trees and real-time build previews.
Non-blocking operational loops streaming tool logs as they execute.
Our ultra-low latency WebSocket bus—the **IO Relay Server**—synchronizes states immediately between your central Hive UI, bare-metal terminals, and AI sandboxes.
Hover over nodes on the map to focus them, or click on any node to dispatch a manual state broadcast packet. Watch it stream across the topology map.
Enjoy out-of-the-box hosting orchestrations and advanced, multi-agent AI features with absolutely zero third-party licensing.
Deploy secure virtual hosts with dynamic Nginx upstream routing, custom domain binding, PHP-FPM pools, and live traffic charts.
Fully inspect databases, synchronize MariaDB master-slave configurations, design tables, and render clean schema diagrams instantly.
Dispatch sandbox-secured AI operators that audit configurations, check logs, patch files, and suggest actions with complete transparency.
Kernel-level threat dropping via IPSet, rate-limiting on Nginx, port scanning protection, and dynamic country-level request blocks.
Establish production-grade mail boxes with fully compliant DKIM, SPF, and DMARC setups automatically aligned with your DNS system.
Configure cron-scheduled snapshots of your sites and database structures directly to offline SFTP locations with secure deploy keys.
A native Rust-powered edge web server designed from the ground up to handle high-concurrency reverse proxying, TLS termination, L7 security, and PHP routing with zero hypervisor overhead.
Built with safe, multi-threaded async execution using Tokio, Rustls, and H2. No heavy legacy hypervisor tax or unsafe memory footprints.
Dynamic rate-limiting, geo-blocking, real-time IP banning, and instant anti-DDoS cookie challenges evaluated in-pipeline with microsecond latency.
Master-worker process splitting with UNIX socket FD handoff (SCM_RIGHTS) and adaptive worker load balancing to prevent connection queue overflows.
Seamless negotiation of HTTP/1.1 and HTTP/2. Full WebSocket protocol upgrading and secure bidirectional tunnel proxying automatically initiated.
Direct communication with PHP-FPM sockets. Safe static try_files and dynamic upstream proxy pools executed with complete resource isolation.
Dual access logging (Standard & JSONL). Ingests real-time worker metrics into PostgreSQL for instant dashboard telemetry and hourly rollups.
Our custom Rust-based Smart Distributor mode divides execution between a Master and multiple Worker processes, communicating over UNIX socket feedback loops.
The Master process accepts TCP/TLS handshakes, evaluates global firewall rules, then transfers the live connection FD instantly to the least-loaded worker via SCM_RIGHTS handoffs.