Black Hole servers — now the default

Starting with this release, every new server on VibeCode is created as a Black Hole: no public IP, all ports closed. OPEN mode is available only through an explicit post-creation switch, and only if portal policy permits it.

Why. Security by default. Forget configuring the firewall, issuing SSL certificates, closing service ports, fighting scanners. A Black Hole server has no attack surface — iptables blocks everything inbound at the network stack.

How access works. An agent inside the server opens an outbound WebSocket to the VibeCode Gateway. Your HTTP traffic, SSH, deploys flow through that tunnel. Everything is encrypted, everything passes Bitrix24 authorization.

Access policies. Six levels — from OWNER_ONLY to PUBLIC. By default a new server is reachable only by its owner. Configure in UI or via API.

Migration. Existing servers keep running in their current mode. Mode switching is available on demand from the control panel.