This section is for operators running self-hosted Noxus (VM docker-compose or Kubernetes) who need to define firewall, ingress, and egress rules. On the managed cloud (Documentation Index
Fetch the complete documentation index at: https://docs.noxus.ai/llms.txt
Use this file to discover all available pages before exploring further.
app.noxus.ai) all of this is handled for you — you only
need your users to reach the app over HTTPS.
Noxus has two independent connectivity surfaces. Treat them separately when you
plan firewall rules:
Inbound
Traffic arriving at your deployment — your users’ browsers and API clients,
plus webhooks pushed by external SaaS (Slack, WhatsApp, Teams…).
Outbound
Traffic Noxus initiates — model providers, integration APIs, object storage,
and the optional Noxus Control Service.
The mental model
Two kinds of inbound — don’t conflate them
| Inbound source | What it reaches | Can it be private (LAN/VPN)? |
|---|---|---|
| Your users (browser, API clients, SSE streams) | Frontend + Backend | Yes — if all users are on your network/VPN, the app never needs a public address |
| External SaaS webhooks (Slack events, WhatsApp, Teams, Telegram, generic webhooks) | Relays | No — these are server-to-server calls from the internet and require a publicly reachable endpoint |
OAuth sign-in callbacks are browser redirects, not server-to-server calls.
They only need to be reachable by your users’ browsers — not by the OAuth
provider’s servers. See Inbound connectivity.
What restricted networking costs you
| Restriction | Still works | Breaks / degraded |
|---|---|---|
| No public inbound (private/VPN only) | The full app for internal users; polling channels (Gmail, Outlook, KB sync); Slack via Socket Mode; outbound run webhooks | Push channels: WhatsApp, Teams, Telegram, generic webhook triggers, Google Chat in webhook mode |
| No outbound (air-gapped) | Core orchestration, the editor, data already in the system | Hosted model providers, hosted integrations, NCS-brokered OAuth & auto-upgrade, telemetry, web search/scrape tools |
| Outbound to allowlist only | Everything you allowlist | Anything you forgot to allowlist — see the Endpoint reference |