┌─────────────────────────────────────────────────┐
│ YOUR DEVICES │
│ WhatsApp │ Telegram │ Discord │ Slack │ Web UI │
└─────────────┬───────────────────────────────────┘
│
▼
┌─────────────────────────────────────────────────┐
│ OPENCLAW GATEWAY │
│ ┌──────────┐ ┌──────────┐ ┌───────────────┐ │
│ │ Channels │ │ Sessions │ │ Memory DB │ │
│ │ Router │ │ Manager │ │ (Persistent) │ │
│ └──────────┘ └──────────┘ └───────────────┘ │
│ ┌──────────┐ ┌──────────┐ ┌───────────────┐ │
│ │ Skills │ │ Security │ │ Config │ │
│ │ Engine │ │ Layer │ │ Management │ │
│ └──────────┘ └──────────┘ └───────────────┘ │
└─────────────┬───────────────────────────────────┘
│
▼
┌─────────────────────────────────────────────────┐
│ AI MODEL PROVIDERS │
│ Anthropic │ OpenAI │ Google │ OpenRouter │ ... │
└─────────────────────────────────────────────────┘
~/.openclaw/openclaw.json
{
gateway: {
// Required: local or remote
mode: "local",
// Server binding
port: 18789,
bind: "loopback", // 五种网络绑定模式：loopback | lan | tailnet | auto | custom
host: "127.0.0.1", // when bind=custom
// Authentication
auth: {
mode: "token", // token | password | none
token: "gway_...",
password: "..." // optional, for password mode
},
// Tailscale integration
tailscale: {
mode: "off", // off | serve | funnel
resetOnExit: false
},
// Remote Gateway (when mode=remote)
remote: {
url: "ws://...",
token: "..."
},
// Hot reload behavior
reload: {
mode: "hybrid" // hybrid | restart | off
},
// Control UI settings
controlUi: {
allowInsecureAuth: false
}
},
// Canvas host (separate HTTP server for node WebViews)
canvasHost: {
enabled: true,
port: 18793,
bind: "loopback"
}
}
网关Gateway支持五种网络绑定模式，由gateway.bind（或--bind）控制
| Mode | Bind Address | Auth Required | Use Case |
|---|---|---|---|
| loopback | 127.0.0.1 | Optional (recommended) | Local-only access, SSH tunnels |
| lan | 0.0.0.0 (all interfaces) | Yes(token or password) | Direct LAN/WAN access without VPN |
| tailnet | Tailscale IP (100.64.0.0/10) | Yes (token or password) | Tailscale mesh network |
| auto | Falls back through loopback → tailnet → lan | If non-loopback | Automatic best-effort |
| custom | gateway.host value | Yes (token or password) | Specific IP binding |
gateway.auth.token 或者 gateway.auth.password，Gateway拒绝启动此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。