Skip to content

Where the agent runs, and where it doesn't yet.

The matrix below comes from the installer tests and real installs. “Tested” means it went through the matrix; “supported” means the code covers it, without a dedicated matrix entry.

ItemStatusNote
Systems
Ubuntu 22.04 LTSTestedIncluding without ipset installed.
Ubuntu 24.04 LTSTestedReal install checked; reinstall and rollback tested.
Ubuntu 26.04 LTSTested—
Debian 12TestedWith iptables-legacy.
AlmaLinux 9TestedReal install checked, with SELinux.
Rocky Linux 9Tested—
WindowsNot yetPlanned for the future.
Architecture
amd64 (x86_64)Tested—
arm64 (aarch64)TestedDownload, signature and update tested under emulation.
Firewall
iptables-nftSupportedDefault on current distributions.
iptables-legacyTestedDebian 12.
ipsetSupportedUsed when present; the agent also works without it.
IPv4 and IPv6SupportedBlocks, rules and geoblocking on both families.
ufwCoexistsufw rules are not changed.
firewalldCoexistsIf a reload removes the jump to atalince's chain, the agent restores it.
CSFCoexists—
Docker
Published ports (DOCKER-USER)SupportedSince agent 1.0.4. Includes Coolify and Compose.
Docker's nftables backendSupportedSince agent 1.0.7.
Agent in a container (Docker, Swarm, Helm)Not yetToday the agent runs on the host.
Log sources
journald · /var/log/auth.log · /var/log/secureSupportedSSH.
nginx · ApacheSupportedAccess logs; log-based web detection, no inline WAF.
mail.log · maillog · DovecotSupportedMail.
vsftpd · ProFTPDSupportedFTP.
MySQL/MariaDB · PostgreSQL · MongoDBSupportedDatabases.
Network
Outbound HTTPS (443)SupportedThe only network requirement. No inbound port.

Can't find your setup? Write to [email protected]. Install guide →

Founders program

Use atalince from the start.

Pro features for up to 3 servers, free of charge, for 12 months. Every application is reviewed by the team.