The gateway is loopback-only and refuses to bind to non-local addresses. Public traffic and admin traffic use different local ports by default. The process shuts down gracefully on SIGINT and SIGTERM.