Skip to main content
Networking docs cover how machine processes receive inbound traffic, how clients connect to streaming endpoints, how tokens protect access, and when to use SSH instead of HTTP preview routing.

Choose A Connection Path

Preview URL Shape

The service inside the machine must bind to 0.0.0.0, not only 127.0.0.1. Preview URLs are signed bearer URLs; treat them like temporary credentials.

Security Model

Networking Guides

Preview URLs

Expose HTTP and WebSocket services running inside a machine.

Custom Preview Proxy

Front machine previews with your own reverse proxy.

Access control

Restrict outbound network access for machine workloads.

Token model

Separate API keys, preview tokens, proxy tokens, traffic tokens, and signed URLs.

WebSockets

Connect to streaming machine endpoints.

SSH

Connect to a machine over SSH when the workflow requires it.