You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
PR #2310 by mattjoyce and ksylvan: feat: opt-in allowlist for plaintext http to private/LAN model servers
Add FABRIC_ALLOW_INSECURE_LAN, an opt-in allowlist of hosts that can use plaintext http. Use it for a model server on a private network, LAN, or tailnet. Separate entries with commas or spaces. An entry can be an exact IP, a CIDR (192.168.20.0/24), an exact hostname, a hostname suffix (*.ts.net), or the keyword lan.
The lan keyword matches private, CGNAT, link-local, and ULA addresses, and hostnames that end in .local, .ts.net, .lan, .internal, or .home.arpa. It never matches a public address.
The default does not change. When the variable is unset or empty, it matches nothing. The check reads only the host in the URL and does not resolve names.