Skip to content

firewall #274

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 25, 2025
Merged

firewall #274

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
100 changes: 30 additions & 70 deletions apps/docs/content/references/firewall.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,60 +13,27 @@ A Firewall is a network security system that monitors and controls incoming and

At Zerops, we implemented a robust firewall system to protect our platform and your applications.

## Default Firewall Rules

### Allowed Outbound Ports

<table className="w-full my-1.5">
<thead>
<tr>
<th className="w-fit">Protocol</th>
<th className="w-fit">Port</th>
<th className="w-full">Service</th>
</tr>
</thead>
<tbody>
<tr>
<td className="w-fit">TCP/UDP</td>
<td className="w-fit">80</td>
<td className="w-full">HTTP</td>
</tr>
<tr>
<td className="w-fit">TCP/UDP</td>
<td className="w-fit">443</td>
<td className="w-full">HTTPS</td>
</tr>
<tr>
<td className="w-fit">TCP/UDP</td>
<td className="w-fit">22</td>
<td className="w-full">SSH</td>
</tr>
<tr>
<td className="w-fit">TCP/UDP</td>
<td className="w-fit">53</td>
<td className="w-full">DNS</td>
</tr>
<tr>
<td className="w-fit">TCP/UDP</td>
<td className="w-fit">123</td>
<td className="w-full">NTP</td>
</tr>
<tr>
<td className="w-fit">TCP</td>
<td className="w-fit">587</td>
<td className="w-full">SMTP (with STARTTLS)</td>
</tr>
</tbody>
</table>

### Restricted Ports

To maintain platform security, certain ports are restricted:

- **TCP**: All ports in the range 1-1024 (except those explicitly allowed above)
- **UDP**: All ports in the range 1-65535 (except those explicitly allowed above)

> **Note**: Ports outside these ranges are generally unrestricted.
## Port Access Rules

### UDP Ports
*No restrictions*

### TCP Ports

#### **TCP ports 1-1024**
The following specific ports are allowed:

- **22** - SSH
- **53** - DNS
- **80** - HTTP
- **123** - NTP
- **443** - HTTPS
- **587** - SMTP (with STARTTLS)

*All other TCP ports in the range 1-1024 are **blocked** for security reasons, see below.*

#### **TCP ports 1025-65535**
*No restrictions*

## Security Measures

Expand All @@ -76,31 +43,24 @@ These firewall rules are strategically implemented to:
- Protect Zerops and its users from potential security threats
- Maintain compliance with security best practices

## Requesting Firewall Modifications

If your application requires access to additional ports:

1. Contact Zerops support at `support@zerops.io`.
2. Include in your request:
- Detailed explanation of your use case.
- Specific ports and protocols needed.
- Mention your Project ID and Organization ID from your Zerops Dashboard.

## Common Use Cases

### Standard Web Applications (HTTP/HTTPS)

- Full access to HTTP/HTTPS communication (ports 80/443)
- Unrestricted DNS queries (port 53)
- Time synchronization via NTP (port 123)

> Enabled by default for all projects on Zerops.

### Email Services

- SMTP access through port 587 (with STARTTLS)
- For detailed SMTP configuration, see our [SMTP documentation](/references/smtp)

### Custom Applications
- Special port requirements should be discussed with support
- Each request is evaluated based on security implications
## Requesting Firewall Modifications

If your application requires access to additional ports:

1. Contact Zerops support at [support@zerops.io](mailto:support@zerops.io).
2. Include in your request:
- Specific ports and protocols needed.
- Detailed explanation of your use case.
- Mention your Project ID and Organization ID from your Zerops Dashboard.
69 changes: 22 additions & 47 deletions apps/docs/static/llms-full.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22734,66 +22734,41 @@ The primary focus is on managing outbound communication to prevent potential pla
## What is a Firewall?
A Firewall is a network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules.
At Zerops, we implemented a robust firewall system to protect our platform and your applications.
## Default Firewall Rules
### Allowed Outbound Ports

Protocol
Port
Service

TCP/UDP
80
HTTP

TCP/UDP
443
HTTPS

TCP/UDP
22
SSH

TCP/UDP
53
DNS

TCP/UDP
123
NTP

TCP
587
SMTP (with STARTTLS)

### Restricted Ports
To maintain platform security, certain ports are restricted:
- **TCP**: All ports in the range 1-1024 (except those explicitly allowed above)
- **UDP**: All ports in the range 1-65535 (except those explicitly allowed above)
> **Note**: Ports outside these ranges are generally unrestricted.
## Port Access Rules
### UDP Ports
*No restrictions*
### TCP Ports
#### **TCP ports 1-1024**
The following specific ports are allowed:
- **22** - SSH
- **53** - DNS
- **80** - HTTP
- **123** - NTP
- **443** - HTTPS
- **587** - SMTP (with STARTTLS)
*All other TCP ports in the range 1-1024 are **blocked** for security reasons, see below.*
#### **TCP ports 1025-65535**
*No restrictions*
## Security Measures
These firewall rules are strategically implemented to:
- Prevent unauthorized use of the Zerops infrastructure for spam or network attacks
- Protect Zerops and its users from potential security threats
- Maintain compliance with security best practices
## Requesting Firewall Modifications
If your application requires access to additional ports:
1. Contact Zerops support at `support@zerops.io`.
2. Include in your request:
- Detailed explanation of your use case.
- Specific ports and protocols needed.
- Mention your Project ID and Organization ID from your Zerops Dashboard.
## Common Use Cases
### Standard Web Applications (HTTP/HTTPS)
- Full access to HTTP/HTTPS communication (ports 80/443)
- Unrestricted DNS queries (port 53)
- Time synchronization via NTP (port 123)
> Enabled by default for all projects on Zerops.
### Email Services
- SMTP access through port 587 (with STARTTLS)
- For detailed SMTP configuration, see our [SMTP documentation](/references/smtp)
### Custom Applications
- Special port requirements should be discussed with support
- Each request is evaluated based on security implications
## Requesting Firewall Modifications
If your application requires access to additional ports:
1. Contact Zerops support at [support@zerops.io](mailto:support@zerops.io).
2. Include in your request:
- Specific ports and protocols needed.
- Detailed explanation of your use case.
- Mention your Project ID and Organization ID from your Zerops Dashboard.

----------------------------------------

Expand Down