Fibmesh Publish / Use cases

Keep the application.
Bring its audience.

A portal on an office server. A preview on a workstation. An API on your own compute. Publish gives an HTTP application a public entry point where it already runs.

Explore six deployments Use-case guide · Confirm platform and deployment support during assisted setup.

Publish is available with assisted setup. Confirm supported platforms and deployment requirements. Separately marked proposals remain outside the released scope.

Six ways to use the same connection model.

Illustrative deployments, not completed customer installations. Every .example address below is non-live; application authentication still applies.

01 / Business applications

Customers reach the portal.
The database stays internal.

A business runs a customer portal beside its inventory system on an office server. Customers need the portal without access to the rest of the office network.

The publication routes its public hostname to the portal’s web address and port through the server connector. The app owns customer accounts and data permissions. Its database stays an internal dependency with no publishing rule.

The operating responsibility

Choose a supported always-on host. Plan the public base URL, dependable app login, backups and office upload capacity. Publish supplies reachability; you still host the app and store its data.

A single application target
Customershttps://studio-portal.publish.fibmesh.examplePublic HTTPS address
FibmeshWireGuard → server connector
127.0.0.1:3000Portal on the office server
Illustrative deployment · non-live Fibmesh subdomain · application authentication still applies
Internal database

An application dependency, with no publishing rule.

02 / Integrations

Receive the event
where your code runs.

A developer tests an integration, or a team runs an API on its own server. An external system calls the HTTPS endpoint without joining a private network.

External integrationhttps://studio-hooks.publish.fibmesh.examplePublic HTTPS address
FibmeshWireGuard → server connector
127.0.0.1:8080HTTP webhook receiver
Illustrative deployment · non-live Fibmesh subdomain · application authentication still applies

Validate and process in the app.

Preserve the request body, verify tokens or sender signatures, reject unauthorised requests and handle timeouts and repeated events safely. Delivery and retry behaviour belongs to the sender; Publish is not a queue or replay store.

Callbacks from your application keep its existing outgoing route unless you configure a separate outbound service.

03 / Client review

Share the preview
on your workstation.

A studio gives a client a browser address for a preview running on its workstation. Keep test data in that environment and use the application’s access controls for the review.

Client reviewerhttps://studio-preview.publish.fibmesh.examplePublic HTTPS address
FibmeshWireGuard → workstation connector
127.0.0.1:5173Preview on the studio workstation
Illustrative deployment · non-live Fibmesh subdomain · application authentication still applies

Close one review independently.

Several projects can have separate publications on the same workstation. Pause or remove one publication when its review ends. Plan for workstation sleep, development-server host restrictions and exposed debugging tools.

Proposed extensions: automatic expiry and Fibmesh-managed visitor login. Do not assume either is already supplied.

04 / Self-hosted services

Your infrastructure.
A separate public identity.

A document portal, reporting tool or collaborative web app can live on a home server, dedicated machine or cloud VM. The publication’s hostname is separate from the current hosting provider.

App usershttps://team-docs.publish.fibmesh.examplePublic HTTPS address
FibmeshWireGuard → host connector
127.0.0.1:8080Self-hosted document app
Illustrative deployment · non-live Fibmesh subdomain · application authentication still applies
If you move the application

Move the workload.
Then change the target.

  1. 01

    Bring up the application on the new infrastructure.

  2. 02

    Verify the new target before changing the publication.

  3. 03

    Manage data, databases and active sessions separately. A hostname change does not move them or guarantee uninterrupted migration.

Plan sustained bandwidth, resource limits, application updates and a realistic availability target. Private file shares and backup protocols may be better served by Networks.

05 / Edge and local equipment

An approved site app.
One explicit LAN target.

A software vendor needs browser access to an application at a customer site. Its server cannot run a connector; a Fibmesh Edge connector on the LAN can reach it.

Authorised site operatorhttps://branch-console.publish.fibmesh.examplePublic HTTPS address
FibmeshWireGuard → Edge connector
192.168.1.20:8080Selected web interface on the LAN
Illustrative deployment · non-live Fibmesh subdomain · application authentication still applies

Agree the application boundary.

Get customer approval, retain application authentication and choose a stable target address and port. Use LAN HTTPS where required: WireGuard protects the path to Edge, not a later plaintext LAN hop.

Assess the protocol.

A Windows desktop ERP, NVR stream or proprietary native client needs protocol assessment. A public web link is not a universal remote-access client.

Other site applications can have separate links. Ordinary local and outgoing traffic keeps using the existing network.

06 / Compute and specialist workloads

An HTTP interface.
Your machine does the work.

A team runs an inference API or processing service on its own machine. Publish supplies the intended HTTP entry point while the workload stays with that compute.

Authenticated API clienthttps://lab-api.publish.fibmesh.examplePublic HTTPS address
FibmeshWireGuard → host connector
127.0.0.1:8000HTTP API on your compute
Illustrative deployment · non-live Fibmesh subdomain · application authentication still applies
Response behaviour

Validate the stream.

Check streaming response buffering and timeout settings, concurrent connections and request sizes.

Long-running work

Design a job API.

Large jobs may need an application-level job API instead of one very long request. Plan processing duration.

Resource control

Authenticate before work.

Enforce application quotas and cost controls before accepting expensive work.

Raw model-serving protocols, GPU scheduling and job queues remain outside Publish’s role.

Choose the access model

Start with what
the client needs.

The place an application runs does not decide the product. The access your people, devices or services need does.

Publish ↗

A public HTTP entry point

People or API clients need to reach a web application.

Networks ↗

A private network

Colleagues and devices should join a private network.

Public IPs ↗

An address or non-HTTP delivery

Clients need an address or supported non-HTTP service delivery.

Outbound ↗

A chosen outgoing source

An application needs a selected source IP for outgoing connections.

Compare a public link with a public IP →

Next / Getting started

Choose one application.
Check the whole path.

Confirm the audience, connector and target. Then test HTTPS, application authentication and a real visitor task before sharing the address.