Inspect and Repair Local Networking
The net and net-repair entry points separate visibility from guided repair.
Manage DNS from the Same Operating Model
The DNS workflow supports BIND as well as API-backed providers such as Cloudflare.
Use WireGuard for Private Access
WireGuard profiles can extend approved external devices into the private infrastructure mesh.
Publish Only What Needs to Be Public
HAProxy edge publishing can expose selected web or TCP services from NAT guests without opening the entire private workload.