8. Service Access Model
8. Service Access Model
← Operations Model | Index | Next →
8.1 WG-Only Access Rules
Internal services are reachable only via WG IPs. Service clients use WG IPs for all inter-host traffic.
8.2 Public Exposure Exceptions
Public exposure is permitted only for explicitly approved services (e.g., frontend). Public ingress MUST be restricted to required ports and audited.
End of Service Access Model — RFC-WG-0002