ShieldGate Docs

Network firewall

Publish, HA, and settings

Network publish/rollback, clusters, monitoring, and appliance settings.

Goal

Publish network config safely, watch appliance apply status, and tune cluster/settings flags.

Prerequisites

  • network.publish for publish/rollback; network.monitor for full monitoring views; network.write for settings.

Publish

  1. Open Network → Overview.
  2. Review recent nodes and high-level counts.
  3. Click Publish with an optional comment.
  4. Note the new network config version in the flash message.

Network publish is not the same as Ops → Config publish used by the Proxy.

HA / Monitor

  1. Open Network → HA / Monitor.
  2. Review clusters and nodes (heartbeat, role, capabilities).
  3. With network.monitor, inspect apply status per node after each publish.
  4. Investigate failed applies before the next config change.

Settings and rollback

  1. Open Network → Settings.
  2. Toggle IP forwarding and eBPF options (early drop / flow accelerate) only when you understand appliance impact.
  3. Optionally select the active cluster.
  4. Review versions; Rollback to a known-good version (creates a new version from that payload and republishes).

Tips

  • Prefer Mock datapath in CI/Windows labs; use Appliance:Datapath=Linux only on Linux hosts that should mutate the OS network stack.
  • Keep WAF and network change windows separate when possible so rollbacks stay obvious.
  • Heartbeat-driven node inventory is not fully replaced by manual CRUD—nodes register themselves.

Verify

  • Publish increments the network version.
  • Monitor shows successful apply (or Mock reconcile) on expected nodes.
  • Rollback restores prior effective behavior after appliances pull the new version.