ArkaWall

A cloud-managed firewall and services appliance. You describe what the network should do in ArkaPanel; the ArkaWall applies it — declaratively, atomically, with rollback.

Firewall & routing

nftables firewall with scheduled rules, port forwards and NAT. Multi-WAN failover, PPPoE, policy routing, VLANs — with anti-spoofing and rate-limiting built in.

VPN & remote access

WireGuard VPN for site-to-site and remote users, with client isolation and a secure management tunnel back to the panel.

DHCP, DNS & filtering

DHCP and DNS for the whole LAN, with network-wide ad, tracker and content blocking and per-group filtering policies.

Mail server

Full Postfix + Dovecot stack with rspamd spam filtering, ClamAV antivirus, webmail and compliance archiving.

Web & DNS hosting

Caddy web server with automatic HTTPS and multi-version PHP, plus authoritative DNS with primary and secondary zones.

Monitoring & IPS

Bandwidth, flow and DNS insight, disk-health reporting, CrowdSec and Fail2ban intrusion prevention, and live packet capture.

Also on the box:
Samba / NFS sharesZFS + SnapRAIDSyncthingMQTT brokerPostgreSQL / MySQLrestic backupsUSB backupRescue mode

How it works

From a blank box to a managed appliance in four steps.

  1. 1
    Install

    Boot the ArkaWall installer. It generates a keypair, registers with ArkaPanel, and shows a claim code.

  2. 2
    Claim

    Enter the claim code in ArkaPanel to link the device to your account.

  3. 3
    Configure

    Set up firewall rules, VPN, mail, DNS and more in the panel — no SSH required.

  4. 4
    Deploy

    The panel pushes the config; the device applies it atomically and reports back. Failed changes roll back automatically.

Bring it all under one panel

Add a domain or claim an ArkaWall in minutes. Pay only for what you run — no lock-in.