FAQ
Short answers to common questions about InfraFence - what runs where, resources, firewall rules, monitor mode, data sent, plans, containers and what happens when the dashboard is down.
Last updated:
Does InfraFence replace my firewall?
No. It adds its own chains next to your rules and never modifies them. It can work next to ufw, firewalld, CSF, fail2ban, CrowdSec, Imunify360 and others: see Coexistence.
How heavy is the agent?
One static Go binary of about 9 MB with no dependencies. On the demo server it uses about 25 MB of memory and under 1% CPU.
Can I try it without blocking anything?
Yes. Turn on Monitor mode under Settings › Agent: InfraFence detects and reports everything and blocks nothing. And --dry-run shows what the installer would do without changing the server.
What leaves my server?
Security events and their details, a heartbeat with system metrics, the list of installed packages and the hashes of scanned PHP files. Never full logs or files. See the security model.
What if the dashboard goes down?
Protection continues on the server, indefinitely. See When the dashboard is unreachable.
Can it lock me out?
It is built not to: it never bans private addresses, the server's own addresses, the dashboard or your whitelist; it never closes SSH ports; and every change to the server is checked afterwards and undone if SSH or a site stops answering. Add your own addresses to the whitelist anyway.
Does it work in containers and on Kubernetes?
Yes: see Docker and Kubernetes.
Which distributions are supported?
The 15 distributions on the supported distributions page are tested before every release.
Does it support IPv6?
Closed ports apply to IPv6 too. Bans, the whitelist, country blocks and outbound blocks apply to IPv4.
Is it free?
Starter is free for one server, with every detection layer. Paid plans are per server and include the panel plugins: see Billing and plans.
Can I sign up with a temporary email address?
No. Temporary (disposable) inboxes cannot create an account: sign up with a permanent email address. Accounts that already exist are not affected. If your provider is refused by mistake, write to info@infrafence.com.
Can I read the code?
Yes. The agent and the panel plugins are source-available under BSL 1.1 on GitHub.
Where are the release notes?
In the changelog.