Features

A firewall for your data flows.

Rules that decide which of your systems may send data where — checked before a single row moves.

Every run has two ends: a source and a destination, and each of them sits either in your cloud or on one specific on-prem client. The BARRY firewall is an ordered set of allow and deny rules over exactly those pairings, evaluated at the start of every run – manual, scheduled or triggered alike – so a flow you never permitted simply never starts. Rules are matched by priority, and the operands are deliberately coarse: your cloud, any client, or one named client. A separate rule type covers live serving, so you can stop a client streaming data outward while leaving its normal transports untouched. Because the check happens before anything is queued, a refused flow moves no data at all.

✓Ordered allow / deny rules over source → destination pairings
✓Operands: your cloud, any client, or one named client
✓Default-deny once enabled — nothing moves until you allow it
✓Blocked runs never start, so there is no partial data movement
✓A separate rule for live serving, to stop a client streaming data out
✓Every rule change audited, every refusal visible in the monitor

⤢ Expand

Default-deny

Switch it on and everything is blocked until you write an allow rule. Nothing moves by accident.

Checked before the run

The gate sits ahead of the queue — a refused flow never consumes a slot and never half-moves data.

It can't lock you out

It only ever refuses data movement, never logins. An administrator can always switch it back off.

Written once, versioned like everything else

Firewall rules are part of config-as-code: they live in your Git repository as plain YAML, reference clients by name rather than by ID, and travel between environments with the rest of your configuration. The baseline rules that ship with the feature can be tuned or disabled, but never deleted by accident.

Ready to unlock your data?

See how BARRY brings your on-premises data to the cloud — safely, and on your terms.