Shredstream Firewall Setup

Required network path

cubestech sends packets directly to the IPv4 address and UDP port that you register. Use a public route.

text

cubestech gateway → public IPv4:UDP port → firewall or NAT → receiver socket

Host firewall example

Choose the command that matches your system. Replace 20000 with your port.

bash

sudo ufw allow 20000/udp

bash

sudo firewall-cmd --permanent --add-port=20000/udp
sudo firewall-cmd --reload

Cloud firewall

Create an inbound UDP rule for the configured port. V1 does not publish a fixed cubestech source-IP allowlist, so do not create a rule that depends on one.

Opening UDP to the internet lets other hosts send datagrams to the same port. Isolate the receiver, validate packet shape, limit process privileges, and keep the operating system patched.

Verify receipt

Start packet capture before saving the destination. The first packet is a short SHREDCAST-VERIFY <destination id> <token> challenge that must be pasted into the node details screen.

bash

sudo tcpdump -n -i any "udp and dst port 20000"

If packet capture sees traffic but the application does not, check the bind address, container port mapping, socket buffer, and process permissions. If packet capture sees nothing, check the dashboard status, public route, security group, firewall, and NAT mapping.