Skip to main content
Planned. This page describes designed behaviour that is not built yet. Details may change before it ships.
Apps list the outside hostnames they call under egress in gliss.yaml. Everything else is blocked, at every stage. The platform’s own services are always reachable. In the default catalog any public hostname is approved except a short blocklist. With lockdown on, nothing is approved until you list the domains apps need. In the catalog you decide:
  • which hostnames are approved, or that any public hostname is approved unless blocked;
  • which hostnames are always blocked;
  • whether apps may list wildcards (*.example.com) or IP addresses;
  • how many hostnames an app may list.