Remote access decides where your Burrow can be reached from. Out of the box it is reachable and every request is gated by who is asking, not by where they are. This section is where you narrow that, see whether the outside world can actually reach you, and choose whether to use RatelKey's relay.
Restrict to local network#
Turn this on and your Burrow refuses any request that did not come from its own network, before it even looks at who is asking. It suits a Burrow that lives on your own hardware and has no business answering from the internet.
The switch can only be moved from the local network. Viewed from anywhere else it reads as plain text with a note saying so. That cuts both ways on purpose: nobody can lock your Burrow down remotely, and nobody can lift a lockdown remotely either. A terminal session on the Burrow's own host counts as local, so a Burrow with no usable network address is still reachable that way.
On your network#
The address to use from the same network as the Burrow, host and port together. This is the address to hand to a machine sitting beside it.
Reachability#
While your Burrow is not locked down, it checks whether it can actually be reached from outside. The check goes out to RatelKey, which connects back to your Burrow's public address, so it tests the real path rather than reading a setting.
Result | What it means |
|---|---|
Reachable from outside your network | The path works. The Public IP and Remote address rows show where the Burrow answers. |
Not reachable from outside | Nothing answered. The message names the port that needs forwarding to this Burrow. |
Can't verify from here | Your Burrow and RatelKey appear to share a network, so the check would not prove anything. |
Couldn't run the check | The round trip failed. Re-check once the Burrow has settled. |
Re-check runs it again, which is what you want after changing a port forward on your router.
RatelKey relay fallback#
The relay is a free service RatelKey runs so a Burrow with no way in from the internet is still reachable. Your Burrow dials out to it and keeps the connection open, and the Relay address row shows the hostname you answer on through it.
It is on by default. Turn it off and logins reach your Burrow directly or not at all. Unlike the lockdown, this switch works from anywhere, because turning it off only ever reduces where your Burrow can be reached.
Public port#
The port to advertise to the outside world, between 1 and 65535. Set this when your router forwards an external port to a different one on the Burrow, so the addresses your Burrow hands out match what actually works.
Like the lockdown, it can only be changed from the local network. It is separate from the port the Burrow listens on, which is fixed while it is running.