The Network tab shows your VM’s public-facing addresses and its outbound/inbound traffic for the current billing month.Documentation Index
Fetch the complete documentation index at: https://docs.suji.fr/llms.txt
Use this file to discover all available pages before exploring further.
Public addresses
| Type | What it is | When to use |
|---|---|---|
| Tunnel hostname | <install-subdomain>.suji.fr per exposed install | The “real” entry point for users of the app. HTTPS-terminated by Cloudflare. |
| IPv4 | Dedicated public IPv4 | SSH, anything that needs a raw IP |
| IPv6 | Dedicated public IPv6 (where the region provides one) | Direct IPv6 access |
How traffic is counted
- Outgoing — bytes leaving the VM in the current billing month.
- Incoming — bytes arriving at the VM in the current billing month. Free — never counts toward your quota.
- Quota — your plan’s monthly included outbound. Overage may be billed by the cloud provider depending on size.
Resetting / billing cycle
The traffic counters reset on the first of the calendar month, matching the cloud provider’s billing cycle.The tunnel
Every Suji VM ships with cloudflared running as a system container. It:- Holds a long-lived authenticated connection out to Cloudflare’s edge.
- Receives inbound HTTPS for the hostnames in its ingress rules.
- Forwards requests to your apps via
localhost:<port>inside the VM.
Why use the tunnel hostname instead of the public IP?
- TLS: the tunnel terminates valid certificates for
*.suji.frautomatically. - No direct exposure: your app doesn’t have to open a public port — cloudflared connects out, not in.
- DDoS protection: Cloudflare absorbs typical noise.
curl https://1.2.3.4) won’t reach your apps because the apps don’t bind public ports. They listen only on localhost inside the VM’s network namespace.
Next
Firewall
Inbound rules for the public IP.
Snapshots
Backups of the VM’s disk.