---
title: "Domains & edge | Coswarm"
description: "Coswarm’s own proxy routes every host to its service, gets certificates from Let’s Encrypt and filters traffic with Coraza and the OWASP Core Rule Set."
canonical_url: "https://coswarm.dev/features/networking"
meta:
  "og:description": "Coswarm’s own proxy routes every host to its service, gets certificates from Let’s Encrypt and filters traffic with Coraza and the OWASP Core Rule Set."
  "og:image": "https://coswarm.dev/og.png"
  "og:image:height": "630"
  "og:image:width": "1200"
  "og:title": "Domains & edge · Coswarm"
  "twitter:image": "https://coswarm.dev/og.png"
---

> Index of every page on this site: [llms.txt](https://coswarm.dev/llms.txt)

Domains & edge

# Domains with HTTPS, guarded at the edge.

Coswarm’s own proxy routes every host to its service, gets certificates from Let’s Encrypt and filters traffic with Coraza and the OWASP Core Rule Set.

[Install Coswarm](https://coswarm.dev/#install) [Everything in the panel](https://coswarm.dev/features)

panel.acme.dev/domains

shop.acme.dev

→ shop · Let’s Encrypt · 74 d

WAFHTTPS redirect

api.acme.dev

→ api · Let’s Encrypt · 61 d

WAFgRPC

admin.acme.dev

→ backoffice · Uploaded · 12 d

IP allowlistBasic auth

grafana.acme.dev

→ grafana · Let’s Encrypt · 88 d

IP allowlist

## **HTTPS without thinking about it**

Certificates come from Let’s Encrypt by HTTP-01 or TLS-ALPN-01 and renew on their own. Upload your own instead when you have one; expiry dates are always in sight.

## **A firewall per domain**

Coraza with the OWASP Core Rule Set. Choose from 14 rule groups per domain: SQL injection, XSS, remote code execution, scanners and more.

## **Decide who gets in**

IP allowlists and blocklists, by address or CIDR, and basic auth. Requests from outside an allowlist are dropped without an answer.

## **gRPC, TLS upstreams, Cloudflare**

Serve gRPC over h2c, talk HTTPS to the upstream, and read real client addresses when Cloudflare sits in front.

In detail

## What you get

### **Traffic you can see**

- Proxy logs you can search by host, address or path, filtered by status class.
- A 24-hour traffic chart on the dashboard, with each deploy marked where it happened.
- What the firewall dropped, counted.

### **Routing**

- Each host goes to a service and its port; Swarm spreads requests over the replicas.
- Subdomains under your panel’s domain, an HTTPS redirect per domain.
- The proxy runs as its own service on ports 80 and 443.

With Cosmo

Cosmo can add, change and remove domains, summarise traffic for any window up to a week, and probe DNS, TCP or HTTP from inside an app’s container to find where a request stops.

[How Cosmo works](https://coswarm.dev/cosmo)

- “Why does api.acme.dev return 502?”
- “Put grafana behind an IP allowlist”
- “Which paths returned the most 5xx today?”

More of the panel

[**Deployments** Ship an image. Swarm rolls it out.](https://coswarm.dev/features/deployments) [**Databases** Your databases, in the browser.](https://coswarm.dev/features/databases) [**Observability** Know what broke before anyone asks.](https://coswarm.dev/features/observability) [**Marketplace** 65 self-hosted apps, one click each.](https://coswarm.dev/features/marketplace) [**Automation** Deploys that run themselves.](https://coswarm.dev/features/ci-cd)

## Your servers are waiting.

One command, a minute or so, and the panel is on your domain. Free, and yours to keep.

$`curl -fsSL https://coswarm.dev/install.sh | bash`

[See the panel](https://coswarm.dev/features) [ Meet Cosmo](https://coswarm.dev/cosmo)

```json
{"@context":"https://schema.org","@graph":[{"@type":"WebPage","@id":"https://coswarm.dev/features/networking#webpage","url":"https://coswarm.dev/features/networking","name":"Domains & edge","description":"Coswarm’s own proxy routes every host to its service, gets certificates from Let’s Encrypt and filters traffic with Coraza and the OWASP Core Rule Set.","isPartOf":{"@id":"https://coswarm.dev/#website"}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://coswarm.dev/"},{"@type":"ListItem","position":2,"name":"Features","item":"https://coswarm.dev/features"},{"@type":"ListItem","position":3,"name":"Domains & edge","item":"https://coswarm.dev/features/networking"}]}]}
```

```json
{"@context":"https://schema.org","@graph":[{"@id":"https://coswarm.dev/#website","@type":"WebSite","description":"Coswarm turns your Linux servers into a Docker Swarm platform: deploys, domains with automatic HTTPS, databases and logs in one panel, free to self-host. Cosmo, its assistant, reads the cluster and proposes changes you approve.","name":"Coswarm","url":"https://coswarm.dev/"},{"@id":"https://coswarm.dev/features/networking#webpage","@type":"WebPage","description":"Coswarm’s own proxy routes every host to its service, gets certificates from Let’s Encrypt and filters traffic with Coraza and the OWASP Core Rule Set.","name":"Domains & edge","url":"https://coswarm.dev/features/networking","isPartOf":{"@id":"https://coswarm.dev/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://coswarm.dev/features/networking"]}]}]}
```

## Sitemap

See the full [sitemap](https://coswarm.dev/sitemap.md) for all pages.