ExternalVendorCode/balena-supervisor
1
0
Fork 0
mirror of https://github.com/balena-os/balena-supervisor.git synced 2025-06-02 07:40:48 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #2413 from balena-os/clarify-firewall-docs-on-host-network-containers

Browse Source 
Clarify firewall docs on behavior with host network containers
This commit is contained in:
Christina Wang 2025-03-25 13:40:28 -07:00 committed by GitHub
commit 623a1638c1
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
docs/firewall.md
View File

@ -8,10 +8,10 @@ To switch between firewall modes, the `HOST_FIREWALL_MODE` (with `BALENA_` or le
> [!NOTE] Configuration variables defined in the dashboard will not apply to devices in local mode. > [!NOTE] Configuration variables defined in the dashboard will not apply to devices in local mode.
| Mode | Description | | Mode | Description |
| ---- | ----------------------------------------------------------------------------------------------------------------------------------------------------------- | | ---- | ----------- |
| on | Only traffic for core services provided by balena and containers on the host network are allowed. | | on | Only traffic for core services provided by balena are allowed. Any other ports, including those used by containers with host networking, are blocked unless explicitly configured. |
| off | All network traffic is allowed. | | off | All network traffic is allowed. |
| auto | If there _are_ host network services, behaves as if `FIREWALL_MODE` = `on`. If there _aren't_ host network services, behaves as if `FIREWALL_MODE` = `off`. | | auto | If there _are_ host network services, behaves as if `FIREWALL_MODE` = `on`. If there _aren't_ host network services, behaves as if `FIREWALL_MODE` = `off`. |
## Issues ## Issues