# Firewall Settings Table

<table><thead><tr><th width="109" align="center">direction</th><th width="85" align="center">port</th><th width="116" align="center">profile / layer </th><th>description</th></tr></thead><tbody><tr><td align="center">inbound</td><td align="center">9000</td><td align="center">Layer0</td><td>public API </td></tr><tr><td align="center">inbound</td><td align="center">9001</td><td align="center">Layer0</td><td>peer to peer API </td></tr><tr><td align="center">inbound</td><td align="center">9010</td><td align="center">Layer1</td><td>public API </td></tr><tr><td align="center">inbound</td><td align="center">9011</td><td align="center">Layer1</td><td>peer to peer API</td></tr><tr><td align="center">outbound</td><td align="center">all</td><td align="center"></td><td>Tune to your needs</td></tr><tr><td align="center">SSH</td><td align="center">22</td><td align="center"></td><td>Enable remote access to your VPS or server to manage your node effectively.<br><em><mark style="color:orange;">For enhanced security, consider configuring SSH to use a</mark><mark style="color:orange;"> </mark><mark style="color:orange;"><strong>custom port</strong></mark><mark style="color:orange;"> </mark><mark style="color:orange;">instead of the default port 22. This adds an extra layer of</mark><mark style="color:orange;"> </mark><mark style="color:orange;"><strong>obscurity</strong></mark><mark style="color:orange;">, reducing exposure to automated scanning and brute-force attempts.</mark></em></td></tr></tbody></table>

{% hint style="warning" %}
The public and p2p ports mentioned above are customizable if desired to fit your needs.  The default port settings are listed to adhere to the default settings used by nodectl and recommended by the protocol.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.constellationnetwork.io/run-a-node/references/firewall-settings-table.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.