Update the egress policy of a running machine
Machines
Update the egress policy of a running machine
Replace the per-machine egress policy on a running machine without recreate. The host rebuilds the machine’s egress firewall chain atomically; tightening (e.g. to deny_all) fails closed, and broadening only reports success after the new rules apply. The policy survives hibernate/resume.
PATCH
Update the egress policy of a running machine
Authorizations
API key passed as Bearer token
Path Parameters
Machine ID (e.g. mch_a1b2c3d4)
Body
application/json
Typed per-machine egress policy. IPv4 only; no domain/DNS filtering. deny_all is fail-closed and cannot be weakened by other fields.