Skip to main content

clawker firewall

Manage the egress firewall

Synopsis

Manage the Envoy+CoreDNS egress firewall that controls outbound traffic from agent containers. The firewall runs as shared infrastructure on the clawker Docker network, enforcing domain-level egress rules via Envoy (TLS SNI filtering) and CoreDNS (DNS-level allow/deny).

Examples

  # Show firewall health and status
  clawker firewall status

  # List active egress rules
  clawker firewall list

  # Allow a new domain
  clawker firewall add registry.npmjs.org

  # Remove a domain
  clawker firewall remove registry.npmjs.org

  # Temporarily bypass firewall for an agent
  clawker firewall bypass 30s --agent dev

Subcommands

Options

  -h, --help   help for firewall

Options inherited from parent commands

  -D, --debug   Enable debug logging

See also

  • clawker - Manage Claude Code in secure Docker containers with clawker