Runner Servers

Runner mode is designed for environments where inbound SSH is not practical. The Reoclo Runner agent is installed on the server and establishes an outbound WebSocket connection to the public gateway, allowing command relay without exposing a direct management port to the internet.

Installation uses a short-lived registration token generated from the dashboard. The install script downloads the runner, configures it as a system service, and registers the host. After registration, the runner maintains heartbeat updates so Reoclo can detect disconnects and mark the server UNREACHABLE when connectivity is lost.

Use Runner when operating behind NAT, private networking boundaries, or strict firewall controls. You still get the same deployment pipeline behavior as SSH mode, but transport happens through the gateway relay instead of direct socket access from worker to host.