summary refs log tree commit diff
path: root/develop/workers.html
diff options
context:
space:
mode:
authorMadLittleMods <MadLittleMods@users.noreply.github.com>2023-07-05 23:54:53 +0000
committerMadLittleMods <MadLittleMods@users.noreply.github.com>2023-07-05 23:54:53 +0000
commitd70465313b005be530fe498ab67594376aa39b25 (patch)
tree2e68bf1d72349586d189ec083f495410c28418fe /develop/workers.html
parentdeploy: 561d06b481176f61ed12f5a4723b127ff8624662 (diff)
downloadsynapse-d70465313b005be530fe498ab67594376aa39b25.tar.xz
deploy: b07b14b494ae1dd564b4c44f844c9a9545b3d08a
Diffstat (limited to '')
-rw-r--r--develop/workers.html16
1 files changed, 16 insertions, 0 deletions
diff --git a/develop/workers.html b/develop/workers.html
index 691d228990..4b896abc35 100644
--- a/develop/workers.html
+++ b/develop/workers.html
@@ -628,6 +628,22 @@ the stream writer for the <code>receipts</code> stream:</p>
 the stream writer for the <code>presence</code> stream:</p>
 <pre><code>^/_matrix/client/(api/v1|r0|v3|unstable)/presence/
 </code></pre>
+<h4 id="restrict-outbound-federation-traffic-to-a-specific-set-of-workers"><a class="header" href="#restrict-outbound-federation-traffic-to-a-specific-set-of-workers">Restrict outbound federation traffic to a specific set of workers</a></h4>
+<p>The <code>outbound_federation_restricted_to</code> configuration is useful to make sure outbound
+federation traffic only goes through a specified subset of workers. This allows you to
+set more strict access controls (like a firewall) for all workers and only allow the
+<code>federation_sender</code>'s to contact the outside world.</p>
+<pre><code class="language-yaml">instance_map:
+    main:
+        host: localhost
+        port: 8030
+    federation_sender1:
+        host: localhost
+        port: 8034
+
+outbound_federation_restricted_to:
+  - federation_sender1
+</code></pre>
 <h4 id="background-tasks"><a class="header" href="#background-tasks">Background tasks</a></h4>
 <p>There is also support for moving background tasks to a separate
 worker. Background tasks are run periodically or started via replication. Exactly