Concepts & Mental Model
The one-sentence model
A Managed Host runs a DRLink Agent that connects outward to a Server; the Agent creates only the Remote Services you need, and the Server applies Remote, Internet, and AI Access policy.
Core nouns
Server vs Agent ownership
The Server may inspect Remote Service state, but normal Remote Service create/edit/delete happens on the owning Agent Host.Managed Host as a selector
A registered Managed Host also appears as a Network Object of type Managed Host where the policy context allows it. Internet Access may use a Managed Host as a source. It must not use a Managed Host as a destination, directly or through a Network Group containing one.Remote Service states
Fixed TCP
Fixed TCP is a Service Object subtype. Its Service Object port is the destination TCP port. DataRelay Link allocates the public endpoint separately from a dedicated Fixed TCP endpoint pool.Policy modes
WHITELIST denies unmatched requests. BLACKLIST is supported only by Remote Access: matching enabled Rules deny, unmatched requests allow. Rules have no ordering or per-rule action. Policy reset removes Mode/Rules and returns each plane to its own initial state. AI authentication remains required independently.