Full configuration

./target/release/ordo-server
--http-addr 0.0.0.0:8080
--grpc-addr 0.0.0.0:50051
--rules-dir ./rules
--audit-dir ./audit
--log-level info


## Environment Variables

| Variable | Description | Default |
|----------|-------------|---------|
| `ORDO_HTTP_ADDR` | HTTP address | `0.0.0.0:8080` |
| `ORDO_GRPC_ADDR` | gRPC address | `0.0.0.0:50051` |
| `ORDO_UDS_PATH` | Unix Socket path | - |
| `ORDO_DISABLE_HTTP` | Disable HTTP | `false` |
| `ORDO_DISABLE_GRPC` | Disable gRPC | `false` |
| `ORDO_LOG_LEVEL` | Log level | `info` |
| `ORDO_RULES_DIR` | Rules persistence directory | - |
| `ORDO_MAX_VERSIONS` | Max version count | `10` |
| `ORDO_AUDIT_DIR` | Audit log directory | - |
| `ORDO_AUDIT_SAMPLE_RATE` | Audit sample rate (0-100) | `10` |
| `ORDO_DEBUG_MODE` | Debug mode | `false` |

### Multi-tenancy Configuration

| Variable | Description | Default |
|----------|-------------|---------|
| `ORDO_MULTI_TENANCY_ENABLED` | Enable multi-tenancy | `false` |
| `ORDO_DEFAULT_TENANT` | Default tenant ID | `default` |
| `ORDO_DEFAULT_TENANT_QPS` | Default QPS limit | - |
| `ORDO_DEFAULT_TENANT_BURST` | Default burst limit | - |
| `ORDO_DEFAULT_TENANT_TIMEOUT_MS` | Execution timeout (ms) | `100` |
| `ORDO_TENANTS_DIR` | Tenant config directory | - |

### Signature Verification Configuration

| Variable | Description | Default |
|----------|-------------|---------|
| `ORDO_SIGNATURE_ENABLED` | Enable signature verification | `false` |
| `ORDO_SIGNATURE_REQUIRE` | Reject unsigned rules | `false` |
| `ORDO_SIGNATURE_TRUSTED_KEYS` | Trusted public keys (comma-separated) | - |
| `ORDO_SIGNATURE_TRUSTED_KEYS_FILE` | Public key file path | - |
| `ORDO_SIGNATURE_ALLOW_UNSIGNED_LOCAL` | Allow unsigned local rules | `true` |

## Docker Deployment

### Dockerfile

```dockerfile
FROM rust:1.75 as builder
WORKDIR /app
COPY . .
RUN cargo build --release

FROM debian:bookworm-slim
COPY --from=builder /app/target/release/ordo-server /usr/local/bin/
EXPOSE 8080 50051
CMD ["ordo-server"]

Run Container

docker run -d \
    -p 8080:8080 \
    -p 50051:50051 \
    -v $(pwd)/rules:/app/rules \
    -e ORDO_RULES_DIR=/app/rules \
    -e RUST_LOG=info \
    ghcr.io/pama-lee/ordo-server:latest

Nomad Deployment

Production Configuration

job "ordo-server" {
  datacenters = ["dc1"]
  type = "service"
  
  update {
    max_parallel     = 1
    min_healthy_time = "10s"
    healthy_deadline = "3m"
    auto_revert      = true
  }
  
  group "ordo" {
    count = 1
    
    network {
      port "http" { static = 8080 }
      port "grpc" { static = 50051 }
    }
    
    service {
      name     = "ordo-http"
      port     = "http"
      provider = "nomad"
      
      check {
        name     = "http-health"
        type     = "http"
        path     = "/health"
        interval = "10s"
        timeout  = "3s"
      }
    }
    
    task "ordo-server" {
      driver = "docker"
      
      config {
        image = "ghcr.io/pama-lee/ordo-server:latest"
        ports = ["http", "grpc"]
      }
      
      env {
        RUST_LOG = "info"
      }
      
      resources {
        cpu    = 500
        memory = 256
      }
    }
  }
}

Deployment Commands

cd deploy/nomad
nomad job run ordo-server.nomad
nomad job status ordo-server

API Endpoints

HTTP API

Endpoint	Method	Description
`/health`	GET	Health check
`/metrics`	GET	Prometheus metrics
`/api/v1/rulesets`	GET	List all rules
`/api/v1/rulesets/:name`	GET/PUT/DELETE	Manage rules
`/api/v1/execute/:name`	POST	Execute rule
`/api/v1/rulesets/:name/versions`	GET	Version history
`/api/v1/rulesets/:name/rollback`	POST	Rollback version

Execute Rule

curl -X POST http://localhost:8080/api/v1/execute/discount-check \
    -H "Content-Type: application/json" \
    -d '{"input": {"user": {"vip": true}, "order": {"amount": 500}}}'

Monitoring Metrics

Prometheus Metrics

ordo_info{version="0.2.0"} 1
ordo_uptime_seconds 3600
ordo_rules_total 12
ordo_executions_total{ruleset="payment-check",result="success"} 1000
ordo_execution_duration_seconds_bucket{ruleset="payment-check",le="0.001"} 950
ordo_execution_duration_seconds_sum{ruleset="payment-check"} 1.5

Grafana Dashboard Queries

# QPS
rate(ordo_executions_total[5m])

# Average latency
rate(ordo_execution_duration_seconds_sum[5m]) / rate(ordo_executions_total[5m])

# P99 latency
histogram_quantile(0.99, rate(ordo_execution_duration_seconds_bucket[5m]))

# Error rate
rate(ordo_executions_total{result="error"}[5m]) / rate(ordo_executions_total[5m])

Audit Logging

Enable Audit

./ordo-server --audit-dir ./audit --audit-sample-rate 10

Log Format (JSON Lines)

{"timestamp":"2024-01-08T10:00:00.123Z","level":"INFO","event":"server_started","version":"0.2.0"}
{"timestamp":"2024-01-08T10:00:01.456Z","level":"INFO","event":"rule_created","rule_name":"payment"}
{"timestamp":"2024-01-08T10:00:02.789Z","level":"INFO","event":"rule_executed","rule_name":"payment","duration_us":1500}

Dynamic Sample Rate Adjustment

# Get current sample rate
curl http://localhost:8080/api/v1/config/audit-sample-rate

# Update sample rate
curl -X PUT http://localhost:8080/api/v1/config/audit-sample-rate \
    -H "Content-Type: application/json" \
    -d '{"sample_rate": 50}'

CLI Tools

Key Generation

./ordo-keygen --output keys/
# Generates: keys/private.key, keys/public.key

Rule Signing

./ordo-sign --key keys/private.key --input rule.json --output rule.signed.json

Signature Verification

./ordo-verify --key keys/public.key --input rule.signed.json

Key Files

crates/ordo-server/src/config.rs - Server configuration
crates/ordo-server/src/api.rs - HTTP API
crates/ordo-server/src/grpc.rs - gRPC service
crates/ordo-server/src/metrics.rs - Prometheus metrics
crates/ordo-server/src/audit.rs - Audit logging
deploy/nomad/ - Nomad deployment configuration

ordo-server-deployment

Ordo Server Deployment and Configuration

Quick Start