A link is a tunnel between one of your edges and an origin, yours or another operator's. Every link adds a 2-hop route: users enter at the edge and leave at the origin.
Creating a link
- On one of your edges, use Link to origin…. The picker lists origins you may link to: your own, open ones, and ones whose operator added your account to their whitelist. Search, filter by country, or show only yours or only other operators'.
- ProofKit sets up the tunnel between the two nodes, using a type both support, preferring the origin's choice.
- The link appears under Edge ↔ Origin Links, and users see the route on the marketplace.
Two origins on the same edge can't share a cover site (SNI), because the edge routes by that name; such a link is refused.
Earnings
The user pays the edge's price plus the origin's price, plus 20%. Each node's operator receives 0.96 × that node's price per GB, as on a direct route, and the platform keeps 20% of what the user pays. olcRTC never passes the entry, so an edge earns nothing from olcRTC traffic. See Revenue split.
Reading the list
Links are grouped by entry. Each row shows the exit, the tunnel type, what the tunnel carries now (↓ toward users, ↑ back), how much it lost over the last hour, the sessions on it, and a 24-hour sparkline. Its dot is green when the link is up and losing 10% or less either way, amber when it is being set up or losing more, red when it is down. Entries with a link that needs a look come first; an entry with more than 20 links starts folded unless one of them needs a look. A label says when the entry or the exit belongs to another operator.
Loss is shown for a direction that sent at least 50 MB in the hour. An entry's own page charts each of its tunnels over time (Metrics tab).
Switching the tunnel
A link's ⋯ menu lists the tunnel types both nodes support. Either node's owner can switch. Switching closes the link's active sessions. See GRE+IPsec.
Removing a link
Either node's owner can remove a link from its ⋯ menu; the confirmation says how many sessions it closes. Removing it tears down the tunnel and closes those sessions. Remove one when the origin is often unreachable from your edge, or when you want to replace it.
An origin's operator decides who may link to it with its foreign edge policy. Tightening the policy later does not remove links that already exist.