The domain check path

The proxy answers one path with no authentication. Ferry uses it to test that a domain reaches this server.

Ferry sends a request to your domain, with a token in the path.

1 / 4

The path

/.well-known/ferry-domain-check/<token>

The proxy answers this path for each host, with no authentication.

What the answer contains

Part	Rule
The token	The same token as in the path. It must be alphanumeric.
An id	The process made it up when it started.

The answer tells nothing about the services.

Connect a domain shows how you use the check.

Reach the API through SSH

Keep the API on localhost. An SSH tunnel brings its port to your machine.

The one request to a third party

A server behind NAT asks a public service for its IPv4 address. --public-ip replaces this request.