Glossary

Agent

The device-side Mesh of Things container. It joins the private overlay, maintains the device certificate, and—unless the device is mesh-only—bridges authorized dashboard operations to the local Docker socket.

App

A versioned Docker Compose definition managed by Mesh of Things. Assign devices to an app, then promote a saved version to deploy it. An app version is inert until it is promoted.

Bootstrap Command

The docker run command returned when a device is provisioned. It contains the enrollment configuration needed to start that specific agent and is shown only as part of the creation result. Treat it as a secret.

Container

A packaged process containing an application and its runtime dependencies. A container image is the immutable package; a container is a running or stopped instance of that image.

Docker

The container engine used by the Mesh of Things agent and deployment system. The agent mounts the device's Docker socket so authorized dashboard operations and app rollouts can manage local containers.

Docker Compose

A YAML format for defining a multi-container application. In Mesh of Things, each saved Compose definition is an app version. Promoting a version queues the desired application state for assigned devices.

Firewall Group

A reusable set of allow-only inbound rules selected when a device is provisioned. Selecting no firewall group produces default-deny inbound traffic. This dashboard concept is distinct from the certificate device-group selectors that can appear inside individual rules.

Mesh-only Device

A device created with Disable dashboard access. It participates in the private network but does not expose container inspection, logs, terminals, or app deployment to the dashboard.

Network

An isolated trust and address space within an organization. Devices must be on the same network to communicate directly. Every organization has a Default network; current subscription availability determines whether more can be created.

Overlay Network

An encrypted virtual network built on top of an existing network such as the internet. Devices receive private IPv4 and IPv6 addresses and authenticate one another with certificates. Those private addresses are not public internet endpoints.

Over-the-Air (OTA) Update

Deploying software to a remote device without physical access. Mesh of Things performs application updates by rolling out promoted Docker Compose versions to assigned devices.

Peer Isolation

A provisioning posture selected with Isolate from other devices. An isolated device trusts the Mesh of Things infrastructure required for management and eligible relay connectivity, but does not trust other devices on its network. Firewall rules cannot override this certificate-level decision.

Postman

A concrete Mesh of Things infrastructure node assigned to an organization or network. It helps agents join the overlay and carries authorized management traffic. The assignment is stable; postmen are not interchangeable replicas of one identity.

Relay

A hosted forwarding path used when eligible devices cannot establish a direct peer-to-peer route. The relay forwards encrypted packets and does not decrypt their contents. Relay access is controlled at the organization level; check Settings → Billing for current availability.

Version Promotion

Making a saved app version active. Promotion queues a rollout to every assigned device. Saving or validating a version alone does not change running devices.