---
title: About Host Applications
canonical: https://openvpn.net/cloud-docs/owner/hosts/hosts---applications/about-host-applications/
product: CloudConnexa Docs
description: Host Applications provide services running on a Host with a domain name. They can restrict access to only specific application protocols authorized to be used with the application running on the Host. Host Applications can be used in Access Groups to control who can access that Host's Application.
keywords: Host Applications
---

# About Host Applications

Host Applications provide services running on a Host with a domain name. They can restrict access to only specific application protocols authorized to be used with the application running on the Host. Host Applications can be used in Access Groups to control who can access that Host's Application.

A Host Application can be configured only if the Host has been configured with a domain name. If a [private DNS server is being used](https://openvpn.net/cloud-docs/owner/settings/settings---dns/set-private-dns-servers.md), a DNS entry needs to be made, mapping the application's domain name to the tunnel IP address of the Host's Connector(s). Otherwise, there is no need to [add a DNS Record](https://openvpn.net/cloud-docs/owner/settings/settings---dns/set-dns-records.md) to CloudConnexa.

Consider this example of Host Application use:

You want to make a private web server accessible to all users, but allow only the IT department to manage it using SSH. You represent the web server by configuring a Host and providing the Host with a domain name `server.local`. You then add an Application named **webapp**, allow only HTTPS, and provide it a domain name of `web.server.local`. You then add another Application named **manage**, allow only SSH, and provide it a domain name of `mgmt.server.local`. After installing the Connector on the web server, you configure an Access Group allowing access to **manage** and **webapp**to the User Group that has all the IT department members as its Users and another one to provide access to **webapp** for all other User Groups.

With the above configuration, all users can use only HTTPS and access `web.server.local` while the IT department can use `ssh user@mgmt.server.local`.

## Related Documents

- [Add an Application to a Host](https://openvpn.net/cloud-docs/owner/hosts/hosts---applications/add-an-application-to-a-host.md)
- [List, search, edit, and delete Host Applications](https://openvpn.net/cloud-docs/owner/hosts/hosts---applications/list-search-edit-and-delete-host-applications.md)
- [About Hosts](https://openvpn.net/cloud-docs/owner/hosts/hosts---hosts/about-hosts.md)
- [About Host Connectors](https://openvpn.net/cloud-docs/owner/hosts/hosts---connectors/about-host-connectors.md)
- [About Host IP Services](https://openvpn.net/cloud-docs/owner/hosts/hosts---ip-services/about-host-ip-services.md)
- [Add a Host to access an Application Server](https://openvpn.net/cloud-docs/owner/hosts/hosts---hosts/add-a-host-to-access-an-application-server.md)

---

Prev: [Hosts - Applications](https://openvpn.net/cloud-docs/owner/hosts/hosts---applications.md)
Next: [Add an Application to a Host](https://openvpn.net/cloud-docs/owner/hosts/hosts---applications/add-an-application-to-a-host.md)
Index: https://openvpn.net/cloud-docs/llms.txt