This repository serves as the Single Source of Truth (SSOT) for the Home AI Data Trading Platform ("Station"). It defines the architectural blueprints, dual-network interfaces, compute runtime environments, and deployment protocols optimized for low-latency algorithmic execution, MT5/FxPro terminal operations, and redundancy management.
┌──────────────────────────────────────────┐
│ Huawei OptiXstar Router Gateway │
│ (192.168.18.1) │
└────────────────────┬─────────────────────┘
│
┌──────────────────────┴──────────────────────┐
│ │
LAN1 (Ethernet) LAN2 (Ethernet)
Primary Core Pipeline Failover & High-IOPS Sync
│ │
▼ ▼
┌────────────────────────────────────────────────────────────────┐
│ Ubuntu Server (Local System Runtime) │
│ Dual NIC Netplan / Policy-Based Routing │
└──────────────────────────────┬─────────────────────────────────┘
│
┌─────────────────────────┴─────────────────────────┐
▼ ▼
┌───────────────────────────────────────┐ ┌───────────────────────────────────────┐
│ Self-Hosted Windows VPS │ │ Hosted Cloud VPS │
│ (Local Trading Layer) │ │ (Redundant Backup Instance) │
├───────────────────────────────────────┤ ├───────────────────────────────────────┤
│ • Native MetaTrader 5 (MT5) │ │ • Remote Redundant EAs │
│ • FxPro Direct Socket Integrations │ │ • Automated Failover Monitoring │
│ • Low-Latency Execution API Hooks │ │ • Uninterrupted Uptime Guarantee │
└───────────────────────────────────────┘ └───────────────────────────────────────┘
This repository provides standard operating configurations, network routing rules, and deployment code for running deterministic trading infrastructure across hybrid cloud and self-hosted on-premises hardware.
When reading, modifying, or executing tasks within this infrastructure:
Context Verification: Always check whether the deployment target is the Local Linux Execution Layer or the Windows VPS Trading Layer before executing scripts or applying system modifications.
Network Isolation: Maintain policy-based routing across LAN1 and LAN2 interfaces to prevent network congestion between market data streaming and execution channels.
- Credential Protection: Store all API keys, access tokens, and private identifiers inside encrypted environment configurations (
.env) or secure secret vaults. Never hardcode plaintext keys in codebase repositories.
Operating System: Ubuntu Server
Role: Primary data processing, machine learning models, database management, and execution orchestration.
Network Mapping: Configured via Netplan to split traffic across dual network adapters (LAN1 for main workflows and LAN2 for dedicated outbound sockets).
Operating System: Windows Server
Role: Dedicated environment for hosting MetaTrader 5 (MT5) client terminals and FxPro broker connectivity modules.
- Deployment Options:
Self-Hosted Local VPS: Connected via local subnets for physical execution speed and direct access.
External Cloud VPS: Redundant remote hosting (e.g., Equinix LD4) to ensure non-stop execution during local power or network outages.
.
├── README.md # System architectural blueprint & operational directives
├── docs/ # Technical specs & compliance standards
│ ├── infrastructure/ # Ubuntu core & Windows VPS configuration guides
│ ├── networking/ # Dual-LAN setup, netplan rules, & routing logic
│ └── security/ # Secret management & certificate compliance
├── config/ # Configuration templates
│ ├── netplan/ # Policy-based routing & dual-NIC interface configs
│ ├── kernel/ # OS-level tuning parameters (sysctl, CPU isolation)
│ └── mt5/ # EA parameters and terminal initialization profiles
├── deployments/ # Infrastructure-as-Code (IaC)
│ ├── terraform/ # Remote Cloud VPS provisioning scripts
│ └── ansible/ # Local Ubuntu & Windows server playbooks
└── scripts/ # Automation & latency benchmarks
├── latency_check.sh # Sub-millisecond network jitter verification
└── health_monitor.py # Node hardware and link stability agent
To maintain security compliance across both self-hosted and cloud-hosted VPS environments:
Secret Isolation: Environment files containing API keys, database credentials, or broker account details must be excluded via .gitignore.
- Access Security: SSH key-based authentication must be enforced on all Linux environments; password login must be disabled.
Certificate Maintenance: SSL/TLS certificates (such as domain certificates) must be tracked for automated renewal prior to expiration.