Shredstream Firewall Setup

Required network path

NoLimitNodes sends packets directly to the IPv4 address and UDP port that you register. Use either a public route or an assigned 10.250.0.x Shred network address.

NoLimitNodes gateway → public IPv4:UDP port → firewall or NAT → receiver socket

For an assigned private receiver, the path is:

10.250.0.2 relay → assigned 10.250.0.x:UDP port → receiver socket

Host firewall example

Choose the command that matches your system. Replace 20000 with your port.

sudo ufw allow 20000/udp

sudo firewall-cmd --permanent --add-port=20000/udpsudo firewall-cmd --reload

Cloud firewall

Create an inbound UDP rule for the configured port. V1 does not publish a fixed NoLimitNodes source-IP allowlist, so do not create a rule that depends on one.

For an assigned 10.250.0.x receiver, restrict the rule to source 10.250.0.2 when your firewall supports it.

Verify receipt

Start packet capture before saving the destination. The first packet is a short SHRED-FANOUT-VERIFY/1 ... challenge that must be pasted into the node details screen.

sudo tcpdump -n -i any "udp and dst port 20000"

If packet capture sees traffic but the application does not, check the bind address, container port mapping, socket buffer, and process permissions. If packet capture sees nothing, check the dashboard status, public route, security group, firewall, and NAT mapping.