Is there a firewall, and how do I secure my instance?

By default, instances are publicly accessible over the internet, and we don't currently offer a provider-level firewall dashboard. This means it's important to manage traffic filtering yourself from within the instance, using tools like ufw or iptables, and to only open the ports your applications actually need. For any services you don't need to expose publicly, we recommend running them over secure SSH tunnels instead. If you're using containers, make sure they're properly locked down as well, since an exposed or misconfigured container can leave your instance vulnerable.