Platform limits & fair use
The real limits on sites, published ports, resources, SSH, and network egress -- and what happens when a tenant affects others.
HTTP sites
| Limit | Value | Notes |
|---|---|---|
| Sites per instance | 10 | Each site has a label and an origin port. The default site is web on port 80. |
| Origin port | 1--65535 | Ports 22, 25, 53, 137, 138, 139, 445, 1900, and 5353 are denied. |
| Public HTTP ports | 80 and 443 only | Owned by the node edge. Do not publish them to your instance. |
| Path routing | One site per app | Use labels for separate apps. A guest reverse proxy is optional for path routing behind one site. |
Raw TCP
- 10 published ports per instance, including SSH.
- Public ports are allocated by the platform from 23000 upward.
- Origin ports 22, 25, 53, 137, 138, 139, 445, 1900, and 5353 are denied.
Resources
CPU, RAM, and disk come from your plan. The instance is capped at those limits, and its writable layer is quota-limited to the plan's storage. Overrunning memory can slow the instance or cause the kernel to terminate a process; it cannot consume the whole node.
Network
| Control | Behaviour |
|---|---|
| SMTP (port 25) | Blocked. Use a transactional email provider. |
| Cloud metadata | 169.254.169.254 blocked. |
| Control plane | Not reachable from instances. |
| Inter-instance traffic | Blocked. Instances cannot reach each other over the node bridge. |
| Host services | Instances cannot reach host SSH, the edge admin API, or the agent. |
SSH
- Each instance gets one unique host SSH port. The port is stable across restart and rebuild.
- Key authentication is the default; password login is an explicit opt-in.
- The root password is never written to the guest filesystem.
Availability
Each instance lives on one node. There is no cluster-wide load balancer or automatic failover yet. If an instance moves, its sslip alias changes with the node IP; its NairaCloud address and a custom domain can be re-pointed.
Fair use and abuse
Do not scan the shared node or other tenants' ports, run crypto mining, send bulk email, or run a public proxy or Tor exit. Those rules and the enforcement path are in the Acceptable Use Policy. For vulnerabilities in the platform itself, email security@nairacloud.xyz; good-faith research is covered by the safe-harbour section of that policy.