Firewall Configuration Tools
Controlling which network traffic is allowed to reach a server.
Decentralized.Host does not configure host firewalls. You open the API, Raft, WireGuard and edge ports yourself.
The basic model
A firewall decides which network traffic is allowed to reach a machine, typically default-deny (block everything, then explicitly allow only what's needed -- SSH on a restricted IP range, HTTP/HTTPS on 80/443) rather than default-allow. Modern cloud providers usually offer this at two layers: a network-level security group/firewall (managed outside the OS, filtering before traffic even reaches the machine) and an OS-level firewall (ufw/iptables/nftables on Linux) as a second layer -- defense in depth, since a misconfiguration in one doesn't leave you fully exposed if the other is still correct.
Controlling which network traffic is allowed to reach a server. Decentralized.Host does not configure host firewalls. You open the API, Raft, WireGuard and edge ports yourself.