Skytropic

Documentation

Everything you need to put a domain behind the edge — and to understand what happens to each request once it is there.

01

Quick start

Create an account, choose a plan, add your domain in the console, then point its nameservers (or a CNAME) at Skytropic. Certificates are issued automatically; the domain turns active as soon as DNS propagates.

# 1 · add the domain
skytropic domains add shop.example.eu

# 2 · point DNS at the edge
shop.example.eu.  CNAME  shop.example.com.edge.skytropic.space.

# 3 · verify
curl -sI https://shop.example.eu | grep -i server
server: skytropic

02

Product

Skytropic is a B2B edge platform: CDN, WAF, DDoS protection, Zero Trust and end-to-end encryption, developed by Altumptic. Its difference is protocol-level cryptography on European standards (AES-256, ChaCha20-Poly1305, TLS 1.3), an open crypto architecture and an edge designed to avoid vendor lock-in.

03

Architecture

Client (HTTPS / QUIC / TLS 1.3) → edge PoPs with anycast DNS and load balancing → secure tunnels (WireGuard / mTLS) → control plane (console, API gateway, GitOps configuration) → data plane (origin shield, cache cluster, analytics). Key engines: WAF (OWASP CRS + custom expressions), DDoS scrubber, encryption core (Vault / HSM) and observability (Prometheus, OpenTelemetry).

04

Firewall rules

Rules are expressions evaluated at every PoP before a request reaches cache or origin. Each rule has an action — allow, block or challenge — and can be toggled without redeploying.

http.request.uri.path contains "/wp-login"
  and ip.geo.country not in {"DE" "FR" "PL" "JP"}
→ block

05

Account security

Turn on two-factor sign-in in Settings → Security with any TOTP authenticator, and keep your recovery codes offline. Sessions are server-side: you can see every signed-in device and revoke any of them, or sign out everywhere at once. Changing your password signs out all other devices.

06

API

Every action in the console is available over a REST API. Create a key in Settings → API; it is shown once, so store it in your secret manager.

curl https://api.skytropic.space/v1/domains \
  -H "Authorization: Bearer sky_live_…"

07

Roadmap

Phase 1 (MVP): CDN, WAF, DNS, automatic TLS, console. Phase 2: Zero Trust, edge compute, API gateway, bot management, image optimisation. Phase 3: post-quantum cryptography, private link, data residency controls, AI threat intelligence and SDKs.