Zwall
Talk to an Engineer
Talk to an Engineer
Documentation
Docs Home › FAQ

FAQ

FAQ (first-time operator)

Status: SUPPORTED as links into real documents — not marketing copyAudience: first-time Community or Enterprise operator

This FAQ answers operational questions with pointers. It does not replace install or API reference.

What is Zwall?

A Manager plus Agents for eBPF-backed firewalling and observation. Start: Overview, Architecture.

Community or Enterprise?

Community is AGPL-3.0-only, 3 Agents, source install. Enterprise is commercial: Hosting Agent, AI Preview, signed releases, license APIs. Editions, Applicability. Community is not a deprecated trial.

How do I install?

Which port is the Manager on?

Example YAML 8443 with TLS. zwallctl defaults to http://localhost:8080. Use --manager-url https://manager.example.com:8443. Paths and ports.

How do I log in? 

zwallctl login --manager-url https://manager.example.com:8443 --username admin

Login JSON returns token, expires_at, username, role — not session_token. API auth, CLI auth.

Why did the fourth Agent fail?

Community: 403 COMMUNITY_AGENT_LIMIT_REACHED (“ZWall Community supports up to 3 agents”). Enterprise: license 403 with a license object. Errors.

Why 409 on restart or assign?

Hosting observation Agents cannot receive restart commands or rules. Use systemd on the hosting unit. Agent enrollment, Hosting.

Does AI block traffic?

No. AI Preview is advisory; human approval required; no apply-rule AI route. AI Preview.

Where do secrets live?

Enterprise: systemd credential custody (setup.sh --manager-secret-custody; implemented, pending final security acceptance). Community zwallctl secret-rotate jwt|db|all still hits the API. Manager authentication, CLI secrets.

How do I backup?

scripts/backup_db.sh is the dump path. zwallctl backup POSTs /api/v1/maintenance/backup and is not the same. Backup.

How do I upgrade?

Not the in-product updater. Community: rebuild. Enterprise: verified-release admission. Upgrades.

How do I verify an Enterprise release?

zwall-release verify-directory with a pinned trust root. Release trust.

Is there OpenAPI?

No generated OpenAPI. Use this documentation book. API overview.

Prometheus / Grafana?

Scrape /metrics with admin JWT when metrics.enabled. Grafana JSON lives in-tree for operator-hosted Grafana — not SaaS. Prometheus.

Cloudflare / unblock portal on Community?

No. Those HTTP groups are Enterprise-only.

Is cluster HA supported?

Implemented, license-gated, not a public certified HA product.

Where is the command list?

zwallctl index. start/stop print not implemented. There is no cobra firewall list / map dump.

Talk to Enterprise sales?

Public site /contact. Docs do not invent prices.