Self-Hosting Overview

You can self-host an edge without hosted identity by using API-key connector authentication. That supports public routes, password routes, firewall/WAF/rate-limit rules, and rule-based IP/token policies.

Account-private visitor auth needs identity, so it requires a managed/auth-backed edge and control plane.

Edges hold no shared database. They keep ephemeral routes in memory and can push liveness/metering to a control plane when configured.