ArchitectureSecurity model
The one request to a third party
A server behind NAT asks a public service for its IPv4 address. --public-ip replaces this request.
A domain exists. You connected a domain that is not local. Ferry must show its DNS records.
1 / 4
A server behind NAT does not know its public address. Ferry needs this address to show the DNS records of a domain.
The rules
- This is the only request that Ferry makes to a third party on its own.
- Ferry makes it only after a domain that is not local exists.
--public-ipreplaces it.
Prevent the request
ferryd --public-ip <IP>With --public-ip, Ferry asks no service.