v31

core-routes.md

@@ -143,6 +143,7 @@ This file lists the current HTTP routes exposed by Core, grouped by access level
 | `POST` | `/admin/nodes/:id/crypto/mldsa65` | none | Generates ML-DSA-65 keys |
 | `POST` | `/admin/nodes/:id/crypto/tls-ech` | `{ serverName? }` | Generates TLS-ECH keys |
 | `POST` | `/admin/nodes/:id/crypto/vlessenc` | `{ authentication? }` | Generates VLESS encryption material |
+| `POST` | `/admin/nodes/:id/tls-ping` | `{ domain }` | Runs `xray tls ping` on the node to vet a REALITY target (TLS 1.3 / X25519MLKEM768 / RSA cert chain ≥ 3500 B → ML-DSA-65 readiness) |
 | `GET` | `/admin/nodes/xray/versions` | none | Cached xray release tags |
 | `GET` | `/admin/nodes/mtproto/versions` | none | Cached telemt release tags |
 | `PATCH` | `/admin/nodes/:id/routing-config` | `UpdateNodeRoutingConfigDto` | Updates per-node routing config |

node.md

@@ -120,8 +120,9 @@ All other routes require `x-node-auth-key`.
 | `POST` | `/node/xray/install` | Install an Xray version. |
 | `POST` | `/node/geoip/update` | Update GeoIP/geosite files. |
 | `POST` | `/node/xray/probe-outbound` | Test an outbound connection and return latency. |
+| `POST` | `/node/xray/tls-ping` | Run `xray tls ping <domain>`; vet a REALITY target (incl. ML-DSA-65 readiness). |
 | `POST` | `/node/crypto/x25519` | Generate X25519 keys. |
-| `POST` | `/node/crypto/mldsa65` | Generate an ML-DSA-65 seed. |
+| `POST` | `/node/crypto/mldsa65` | Generate an ML-DSA-65 seed/verify pair. |
 | `POST` | `/node/crypto/tls-ech` | Generate TLS-ECH keys. |
 | `POST` | `/node/crypto/vlessenc` | Generate VLESS encryption material. |
 | `POST` | `/node/mtproto/restart` | Restart MTProto processes. |