If Dify is deployed locally and needs to be publicly accessible, it must be paired with an intranet penetration tool to expose the local IP to the public network.