---
title: "Lockdown"
description: "The egress posture every box starts in, where a box reaches only the hosts you allow, through Vakna's proxy."
term:
  id: "lockdown"
  forms: ["lockdown","lockdowns"]
  source: docs
  status: proposed
generated: scripts/generate.ts
verified:
  cli: "0.0.0-mock"
  date: "2026-10-20"
---

> **lockdown**: The egress posture every box starts in, where a box reaches only the hosts you allow, through Vakna's proxy.

## What lockdown blocks

Every host you haven't allowed. The command in the box fails the way it would offline, then Vakna names the host it blocked and the command that allows it.

## How to let a host out

```sh
$ vakna net allow pypi.org
```

```prints
lockdown now lets pypi.org out · 3 hosts allowed 0.04s
```