Support

npm, PyPI, Maven, NuGet, Go, and Conda (beta). Each has a setup page under Ecosystems.

The message contains a request ID. Follow Investigate a blocked install to trace it to the rule that fired, and Manage exceptions if the package should be allowed.

Usually a rule on the versions phase filtered it, most often a delay rule and a recently published version. Check the firewall logs before assuming an outage.

Add an exception: scoped to the package and version, with a reason and an expiry. The rule keeps applying to everything else.

The firewall proxies upstream responses and adds one network hop. It can also cache responses from internal upstreams, so repeated installs are served without a round trip to that registry. See Upstreams and caching.

Rule evaluation is ordered by cost rather than by configuration: a request pays for the expensive checks only when the cheaper rules have allowed it, and a block skips everything after it. See Evaluation order.

Yes, see Self-hosted.

Container image firewalling is planned but not yet available; today the firewall covers the five package ecosystems above. Contact us if this matters for your adoption.