clawker firewall
Manage the egress firewallSynopsis
Manage the Envoy+CoreDNS egress firewall that controls outbound traffic from agent containers. The firewall runs as shared infrastructure on the clawker Docker network, enforcing domain-level egress rules via Envoy (TLS SNI filtering) and CoreDNS (DNS-level allow/deny).Examples
Subcommands
- clawker firewall add - Add an egress rule
- clawker firewall bypass - Temporarily bypass firewall for a container
- clawker firewall disable - Disable firewall for a container
- clawker firewall down - Stop the firewall daemon
- clawker firewall enable - Enable firewall for a container
- clawker firewall list - List active egress rules
- clawker firewall reload - Force-reload firewall configuration
- clawker firewall remove - Remove an egress rule
- clawker firewall rotate-ca - Rotate the firewall CA certificate
- clawker firewall status - Show firewall health and status
- clawker firewall up - Start the firewall daemon
Options
Options inherited from parent commands
See also
- clawker - Manage Claude Code in secure Docker containers with clawker