When a node in the field goes rogue — compromised hardware, stolen device, unauthorized access — you need to cut it off. Not in minutes. Now.
ProxyPass lets you block any node with a single API call or one click in the dashboard. The moment you block a node, two things happen: the active tunnel is terminated immediately, and the node is instructed to back off to a six-hour reconnect interval. Every attempt is rejected. The device is effectively quarantined from your infrastructure.
What Happens Technically
This is not a soft disconnect. The tunnel drops, active sessions through that node end, and no new traffic can flow. If someone has physical access to the blocked device, they cannot use it to reach your network through ProxyPass.
Unblocking is equally simple. One API call or dashboard click, and the node is allowed to reconnect on its next attempt. If auto-update on connect is enabled for the node's group, it will also receive the latest version when it comes back online.
Scenario: The Decommissioned Retail Location
You manage 80 kiosk terminals across retail locations. Store #23 closes permanently. The landlord takes over the space, and the hardware stays behind — you cannot retrieve it. That kiosk terminal still has a ProxyPass node installed with valid credentials.
Without node blocking, that terminal could potentially be powered on by anyone and used to access your infrastructure through the tunnel. The credentials are on the disk. The node would reconnect automatically.
With ProxyPass, you open the dashboard, find the node for Store #23, and click Block. The tunnel drops instantly. Even if someone powers the terminal on six months later, every reconnect attempt is rejected. The hardware is neutralized remotely, without needing physical access.
Why Hardware-Bound IDs Make This Permanent
Combined with hardware-bound node IDs (tied to the CPU ID of the machine), blocking a node is permanent for that specific piece of hardware. Cloning the disk to another machine does not help — the new hardware generates a different node ID and cannot impersonate the blocked one.
For teams managing remote infrastructure, node blocking is not an edge case feature. It is a fundamental security control that you will eventually need. ProxyPass makes sure it works when you do.