Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.techulus.cloud/llms.txt

Use this file to discover all available pages before exploring further.

Not every service speaks HTTP. Techulus Cloud supports exposing raw TCP and UDP ports through proxy nodes for services like game servers or custom protocols.
Database exposure warning: Database ports should usually remain private on the WireGuard network. Public database access increases security risk, and Techulus Cloud does not currently provide HA storage or automatic failover for production databases.

Configuration

When adding a port to a service, set the protocol to tcp or udp:
FieldDescription
PortThe container port your service listens on
Protocoltcp or udp
External portThe port exposed on the proxy node
PublicWhether this port is accessible from the internet
Traffic is routed from the proxy node’s external port through the WireGuard mesh to the container.

TLS Passthrough

For TCP services that handle their own TLS, enable TLS passthrough. This forwards the encrypted connection directly to the container without Traefik terminating TLS.

Firewall

The agent setup script configures firewall rules to allow traffic on the TCP/UDP proxy port ranges. If you set up servers manually, ensure the relevant ports are open.