AS4 / EBMS3 · IGELAX · GO

Igelax eDelivery,
done in Go.

A self-contained AS4/EBMS3 network for the Igelax 4-corner model — embeddable as a Go library, or run as a full test network on Kubernetes. Cross-validated against the Java reference, phase4.

AS4 transit, Access Point to Access Point

FOR DEVELOPERS

One pipeline, both directions.

The same six stages run on send and reverse on receive. Pure Go — no JVM, `scratch`-container friendly, and unit-tested round-trip against the Java reference implementation to catch interop drift.

pkg/as4/sender
compress→sign→encrypt→mime→post→verify receipt

FOR ACCESS POINT OPERATORS

Join the network in five steps.

The control plane handles certificate issuance and DNS registration — you bring an endpoint and a Participant ID.

  1. 01

    Sign in with GitHub

    OAuth login exchanges for a control-plane session — no separate account to create.

  2. 02

    Register an AP seat

    Give it an endpoint URL and an Igelax Participant ID (scheme + value).

  3. 03

    Cert + DNS, automatic

    The control plane mints your AS4 certificate and writes the SML DNS record for you.

  4. 04

    Discoverable via SMP

    Your capabilities are published immediately — other Access Points can find you.

  5. 05

    Send, receive, get paid attention

    Webhook delivery with retries + backoff pushes inbound documents to your systems.

mTLS internal auth

per-service identity, not just a shared key

XSW defense

signature-wrapping attacks rejected

SSRF guards

no private-network delivery targets by default

Replay / dedup guard

MessageId TTL gates every receipt

Durable audit trail

every send + receive, logged

Ready to send your first document?