Pair two applications
Two applications behind separate firewalls need to exchange messages, and neither can accept an inbound connection.
You runNothing on the relay. Each application connects to wss://relay.example.com:9443/ws with the server trust file and its own credential that may connect, and the same fresh token.
Find and end a session
A pairing looks stuck, or an application must be cut off.
You runA session list, then a drop with the token you recognise.
Upgrade or move the relay
A new version is available, or the relay must move to another host.
You runFor a container, pull the new image, remove the old container and run the same command with the same volumes and environment file. On Kubernetes, change image.tag and run helm upgrade.