Chef on steroids

What I don't get is why their Chef server has to be publicly reachable at all.<p>Shouldn't it be available only through their internal, private network?<p>I might be missing something here.

Nice step with the port troubleshooting!

Am I the only one who came here thinking of a Southpark reference?