Cloud Firewall
A managed network edge: firewall rules, NAT, DHCP, a load balancer, and WireGuard or Tailscale VPN.
-
1
What the Cloud Firewall is
One managed guest at the edge of your private network: firewall, NAT gateway, DHCP, load balancer and VPN.
-
2
Create a Cloud Firewall
Name it, attach a private network, and provision. It comes online with its own public address.
-
3
Firewall rules
Ordered Allow and Block rules between the internet, your network and the VPN. First match wins.
-
4
Outbound internet and port forwards
NAT masquerade gives the network internet access; port forwards expose a service inbound.
-
5
DHCP for your network
The firewall can address devices on its primary network, with a pool, DNS, leases and fixed reservations.
-
6
The load balancer (domains and HTTPS)
Publish a service on a domain with a free Let's Encrypt certificate, routed to workloads on the network.
-
7
VPN access (WireGuard and Tailscale)
Reach the private network from your own devices over WireGuard, or join it to your tailnet with Tailscale.
-
8
Connect a workload end to end
Put an app, database or VM on the network, get egress through NAT, and expose it inbound.
-
9
Status, logs and troubleshooting
What each status means, how saved settings become live, and where to look when something does not apply.
Ask AI or open a ticket.
Ask AI in the portal answers from these docs. For anything it cannot settle, open a ticket and an engineer replies by email.