👑 Spedo Engine Admin Control Center

Since version v0.60.0 · Official System Guide · Single-Node Master Control & Observability

User Profiles since v0.66.0: the private portal adds a consolidated account, licence, order, and Direct Inbox view. See Private User Profiles.

Renderer compatibility since v0.62.0: table commands may safely contain escaped pipes (for example lru\|noeviction) or pipes inside inline code without creating extra columns.

1. Overview & Architecture

The Spedo Engine Control Center (http://127.0.0.1:8080) provides low-level operational visibility, live metrics, memory telemetry, and administrative control over the Spedo database runtime:

+-----------------------------------------------------------------------------------------+
|                        SPEDO ENGINE CONTROL CENTER (PORT 8080)                          |
+-----------------------------------------------------------------------------------------+
  • Low-Level Engine Telemetry & Live QPS Graphs (Sub-second resolution)
  • Live Keyspace Explorer & Deep Metadata Inspector (TTL, bytes, types)
  • Client IP Traffic & Security Inspector (SPEDO.IPSTATS 60-min sliding windows)
  • Top Reads & Hot Keys Monitor (SPEDO.TOPREADS CPU contention monitor)
  • Real-Time CDC Mutation Stream (CDC.READ event log)
  • In-Engine SIMD AI Vector & Hybrid Search Studio (VECTOR.SEARCH, SEARCH.HYBRID)
  • Dynamic Observability Flags (Zero-cost toggleable profiler)
  • User Permissions & Role-Based Access Control (ACL SETUSER)
  • Interactive Web CLI Terminal (Direct RESP Command Execution)
+-----------------------------------------------------------------------------------------+

The Control Center operates on zero-overhead principles: all heavy telemetry, sorting, and scraping routines are isolated on background threads or guarded behind dynamic feature flags to maintain sub-microsecond GET/SET execution on the hot path.

2. What You Can See (Observability & Telemetry)

📊 1. Live Engine Telemetry & Health

Real-Time Throughput: Live operations/sec (QPS) graphs with sub-second resolution.
Memory Saturation & RSS: Exact memory breakdown including active RAM allocated, Peak RSS, and LZ4 ColdArchive NVMe disk usage.
Worker Thread Allocations: Per-core CPU load and Tokio worker thread distribution.
WAL Persistence Status: Instant sync status (always, everysec, none), AOF buffer lag, and last snapshot timestamp.

🔑 2. Keyspace Explorer & Inspector

Pattern-Based Scanning: Fast non-blocking key search (, user:, session:, cache:).
Deep Metadata Inspection: View key data type (string, json, hash, set, list, vector, pqueue), exact byte size, and live TTL countdown.
Payload Viewer: Formatted JSON and string payload viewer with one-click key deletion (DEL).

🌐 3. Client IP Traffic & Security Inspector (`SPEDO.IPSTATS`)

60-Minute Sliding Window: Zero-allocation per-client IP request counters at 1-minute granularity.
Traffic Metrics: Request volume over the last 5 minutes, last 1 hour, and lifetime total.
Active Connections & Share: Real-time count of open socket connections and percentage share of total server traffic per IP address.
Last Seen Timestamp: Relative and absolute time of the last command sent by each client IP.

🔥 4. Top Reads & Hot Keys Monitor (`SPEDO.TOPREADS`)

Identifies hot-path keys causing high CPU cache contention or bandwidth saturation.
Displays read count, write count, and hot-key bias mode.

🔄 5. Real-Time CDC Mutation Stream (`CDC.READ`)

Visual chronological event log showing all mutations (SET, DEL, EXPIRE) as they happen in memory.
Useful for debugging distributed synchronization and write-behind pipelines.

🧠 6. AI Vector & Search Studio

SIMD Vector Search Tester: Execute live test queries on any vector index (VECTOR.SEARCH) with metric selection (COSINE, EUCLIDEAN, INNER_PRODUCT) and Top-K results with similarity scores.
Hybrid Search Tester: Test BM25 keyword matching fused with dense vector search (SEARCH.HYBRID) with configurable α weighting factor (from 0.0 vector-only to 1.0 BM25-only).

3. What You Can Control (Management & Actions)

Control Area	Action / Feature	Mechanism / Command	Impact
Memory Quotas	Set Max RAM Limit	`CONFIG SET maxmemory <bytes>`	Enforces upper RAM ceiling dynamically without restart.
Eviction Policy	Change Eviction Rule	`CONFIG SET maxmemory-policy <lru\|noeviction>`	Controls whether old keys are pruned or writes are rejected on full RAM.
ColdArchive Tiering	Configure RAM Threshold	`SPEDO_COL_THRESHOLD_PERCENT` (e.g. `70%`)	Triggers automated LZ4 offloading of idle keys to NVMe disk when threshold is met.
Observability Flags	Dynamic Flag Toggles	`SPEDO.OBSERVABILITY SET <flag> on\|off`	Dynamically turns on/off `command_metrics`, `stage_profile`, `ip_stats`, `cdc`, and `prometheus`. Zero cost when off.
Prometheus Exporter	Master Scraping Switch	Toggle switch in Admin UI or `/metrics`	Enables/disables live OpenMetrics standard endpoint for Grafana, Datadog, or Vector scrapers.
User Role Permissions	Create / Delete / Grant Role	`ACL SETUSER <user> <pass> <role>`	Assigns `admin` (full access), `rw` (read-write), or `ro` (read-only) roles per user.
Data Durability	Force Disk Snapshot	`SAVE` or `SAVE WAIT`	Forces immediate atomic WAL snapshot to disk with `fsync`.
Keyspace Cleanup	Flush Database	`FLUSHDB`	Removes all keys from memory and resets index state (restricted to `admin` role).
Web CLI Terminal	Direct Command Prompt	Interactive terminal in Control Center	Executes any arbitrary RESP command directly with formatted return output.

4. User Roles & Access Control Hierarchy

Spedo implements a zero-overhead bitflag security model verified at L1 CPU cache speed:

+-----------------------------------------------------------------------------------------+
|                                RBAC PERMISSION MATRIX                                   |
+-----------------------------------------------------------------------------------------+
| Role    | Allowed Commands                             | Scope & Operational Boundary   |
+---------+----------------------------------------------+--------------------------------+
| admin   | ALL Commands (173/173)                       | Engine reconfig, FLUSHDB, ACL  |
| rw      | Read, Write, Vector, Queue, CDC, Tx (150+)   | Application workers & services |
| ro      | GET, MGET, VECSEARCH, QPEEK, STRLEN (40+)    | Read-only replicas & auditors  |
+---------+----------------------------------------------+--------------------------------+

To configure users via the RESP protocol or startup scripts:

# Set up a read-write worker
redis-cli -p 6380 ACL SETUSER worker_app WorkerPass2026! rw

# Set up a read-only analytics auditor
redis-cli -p 6380 ACL SETUSER analytics_ro AuditPass2026! ro

5. Launching & Securing the Control Center

The Control Center can be started with custom authentication credentials:

export SPEDO_ADMIN_USER=engine-admin
export SPEDO_ADMIN_PASS="YourSecurePasswordHere"
make admin

Access the web interface at http://127.0.0.1:8080.