RailHubNet - Real-Time Rail Corridor & Schematic

RailHubNet 🇬🇧 UK RAIL PROD

Real-Time Schematic & Topology

Yorkshire Regional Network

Barnsley Hub ➔ Sheffield • Huddersfield • Leeds

Tri-junction topology & real-time tracking engine active

General Settings -
🛡️ Security Center -

👤 User Profile

Your personal account details on RailHubNet

First Name

Last Name

Email Address

Assigned System Role

🎛️ Display & Schematic Preferences

Customize your default canvas viewport and theme

Default Corridor Focus: South Yorkshire Corridor (Barnsley ➔ Mexborough ➔ Meadowhall ➔ Sheffield).
Renderer: Hardware-accelerated HTML5 Canvas 2D @ 60 FPS.

🔔 Spotter Watch Alerts

Configure automated locomotive & class notifications

Phase 1 Alerting: Email notifications via Brevo ([email protected]) are active.

📊 Firewall Overview & Health

Real-time edge firewall metrics and request routing

Total Active Rules

AbuseIPDB 90% Feed

Geoblocking

Disabled

CVEs Impacted

Traffic passes from Host Nginx (Ports 80/443) ➔ Docker Container (127.0.0.1:5050). Real Client IP is resolved from X-Forwarded-For and inspected in memory before request execution.

⚡ AbuseIPDB 90% Confidence Threat Feed

Automated ingestion of confirmed malicious scanners and threat subnets

Feed Strategy: Duplicated from NetLogger architecture. Queries AbuseIPDB blacklist API with confidenceMinimum: 90% (confirmed high-confidence malicious actors only) with fallback to FireHOL Level 1 Netsets.

Last Synchronized: Never

🚫 IP & CIDR Subnet Blocklist

Manage manual IP bans and view threat intelligence rules

IP / CIDR Block	Reason	Type	Added By	Action
Loading block rules...

🌍 Geoblocking & Country Fencing

Enforce ISO-2 country-level restrictions via CF-IPCountry / X-Country-Code

Enable Country-Level Geoblocking

Restricted ISO-2 Country Codes (Comma-separated)

🔍 CVE Vulnerability & Advisory Tracker

Track and monitor runtime dependencies (OpenSSL, Node, Fastify, SQLite)

CVE / Advisory	Component	CVSS / Severity	Remediation Action	Status
Loading advisories...

🗺️ Live Map & Layout Direct Editor

Edit railway stations, corridors, and topological links directly in SQLite without redeploying containers

Changes saved here update the database in real-time. Any browser visiting the site or refreshing immediately renders the new railway layout.

📥 CIF Timetable Import

Downloads the official Network Rail SCHEDULE feed (gzip CIF) and replaces the invented demo seed schedules with genuine live timetable data

Last Successful Import (UTC)

Loading...

Live vs Seed Schedules

Loading...

CIF Download Type

Daily automatic refresh (04:00 UTC)

Imports use your vault-encrypted Network Rail Open Data credentials and mark every imported schedule data_source = 'CIF' so the UI can distinguish live feed rows from demo seeds.
Note: CIF is the planned timetable. Last-minute cancellations, delays and platform changes need the live TRUST/TD feeds (STOMP) layered on top — that's the next phase.

🔐 Network Rail Feeds Encrypted Vault

Enterprise AES-256-GCM encryption with PBKDF2 HMAC-SHA256 & Authenticated GCM Tags

Cipher Algorithm

AES-256-GCM (Auth Tag 128-bit)

Key Derivation

PBKDF2-HMAC-SHA256 (100k iter)

Vault Status

● ENCRYPTED & SECURED

Last Encrypted UTC

-

Encrypted Password Blob (IV : AuthTag : Ciphertext)

                    Loading vault ciphertext...
                  

Update Feed Credentials in Encrypted Vault

Network Rail Open Data Username / Email

Network Rail Password (Plaintext will be encrypted via AES-256-GCM before saving)

Yorkshire Regional Network

RailHubNet Access

⚙️ Platform & Security Settings

Update Feed Credentials in Encrypted Vault