Admin backends

The admin family currently has two protocol-specific surfaces:

• backend-admin-ssh
• backend-admin-http

Current state

• SSH admin is implemented and is the main operator surface today
• HTTP admin exists as a backend family, but the browser-facing surface is still incomplete

Pages

• Admin over SSH and CLI
• Admin over HTTP

Layout

The admin control plane is split by transport:

• frontend-ssh routes PTY-style admin sessions into backend-admin-ssh
• frontend-http mounts backend-admin-http under an admin path or vhost

That keeps transport and service responsibilities separate:

• SSH owns authentication, channels, PTY allocation, and session framing
• HTTP owns host/path routing, cookies, browser behavior, and web responses
• the admin backends own the operator-facing commands and views