Compare commits
15 Commits
main
...
propose-vp
Author | SHA1 | Date | |
---|---|---|---|
c59b6ed900 | |||
a0603bea83 | |||
a1d2f3639e | |||
7d4e766126 | |||
d76c3b11c7 | |||
b91e1f97fd | |||
4ee7d13e19 | |||
cd0947f8ca | |||
1f49ae13ed | |||
8899eb38e5 | |||
91a6e04e62 | |||
6c5840102f | |||
fbdb57d7e9 | |||
a72beb5b20 | |||
50c41de90b |
Before Width: | Height: | Size: 33 KiB |
Before Width: | Height: | Size: 97 KiB |
Before Width: | Height: | Size: 306 B |
Before Width: | Height: | Size: 42 KiB |
@ -1,16 +0,0 @@
|
||||
:original_name: bestpractice_0001.html
|
||||
|
||||
.. _bestpractice_0001:
|
||||
|
||||
Best Practice
|
||||
=============
|
||||
|
||||
- :ref:`VPC and Subnet Planning Suggestions <bestpractice_0002>`
|
||||
- :ref:`Using IP Address Groups to Reduce the Number of Security Group Rules <bestpractice_0013>`
|
||||
|
||||
.. toctree::
|
||||
:maxdepth: 1
|
||||
:hidden:
|
||||
|
||||
vpc_and_subnet_planning_suggestions
|
||||
using_ip_address_groups_to_reduce_the_number_of_security_group_rules
|
@ -1,96 +0,0 @@
|
||||
:original_name: bestpractice_0013.html
|
||||
|
||||
.. _bestpractice_0013:
|
||||
|
||||
Using IP Address Groups to Reduce the Number of Security Group Rules
|
||||
====================================================================
|
||||
|
||||
Scenarios
|
||||
---------
|
||||
|
||||
Finance and securities enterprises have high security requirements when planning cloud networks. Access to servers is often controlled based on IP addresses. To simplify security group rule configuration and provide refined security control, you can use IP address groups in case of the following scenarios:
|
||||
|
||||
- A security group has more than 40 rules.
|
||||
- The direction, type, protocol, and port of security group rules are the same except the address.
|
||||
|
||||
Constraints
|
||||
-----------
|
||||
|
||||
- An IP address group can contain a maximum of 20 IP addresses or IP address ranges.
|
||||
|
||||
Prerequisites
|
||||
-------------
|
||||
|
||||
You have created one or more security groups for access control.
|
||||
|
||||
Typical Case
|
||||
------------
|
||||
|
||||
For example, you plan to configure the following rules for security group A.
|
||||
|
||||
========= ==== ======== ========== =========================
|
||||
Direction Type Protocol Port Range Source/Destination
|
||||
========= ==== ======== ========== =========================
|
||||
Inbound IPv4 TCP 22122 Source: 11.19.255.64/30
|
||||
Inbound IPv4 TCP 22122 Source: 113.31.128.252/30
|
||||
Inbound IPv4 TCP 22122 Source: 113.31.138.0/25
|
||||
Inbound IPv4 TCP 22122 Source: 183.232.25.208/28
|
||||
========= ==== ======== ========== =========================
|
||||
|
||||
The four inbound rules have the same port, type, and protocol but different source IP addresses. In this case, you can use an IP address group to reconfigure the security group rules.
|
||||
|
||||
Procedure
|
||||
---------
|
||||
|
||||
**Create an IP address group.**
|
||||
|
||||
#. Log in to the management console.
|
||||
#. Click |image1| in the upper left corner and Under **Network**, click **Elastic Load Balancing**.
|
||||
#. In the navigation pane on the left, choose **IP Address Groups**.
|
||||
#. Click **Create IP Address Group**.
|
||||
#. Set the parameters.
|
||||
|
||||
- **Name**: **ipGroup-A**
|
||||
|
||||
- **IP Address**:
|
||||
|
||||
11.19.255.64/30
|
||||
113.31.128.252/30
|
||||
113.31.138.0/25
|
||||
183.232.25.208/28
|
||||
|
||||
|
||||
.. figure:: /_static/images/en-us_image_0000001124559441.png
|
||||
:alt: **Figure 1** Creating an IP address group
|
||||
|
||||
**Figure 1** Creating an IP address group
|
||||
|
||||
#. Click **OK**.
|
||||
|
||||
**Configure a security group rule.**
|
||||
|
||||
8. Click |image1| in the upper left corner and Under **Network**, click **Virtual Private Cloud**.
|
||||
9. In the navigation pane on the left, choose **Access Control** > **Security Groups**.
|
||||
10. Locate security group A and click **Manage Rule** in the **Operation** column.
|
||||
11. Under **Inbound Rules**, click **Add Rule**.
|
||||
12. Set the parameters.
|
||||
|
||||
- **Protocol & Port**: **TCP** and **22122**
|
||||
|
||||
- **Type**: **IPv4**
|
||||
|
||||
- **Source**: **ipGroup-A**
|
||||
|
||||
|
||||
.. figure:: /_static/images/en-us_image_0000001124559429.png
|
||||
:alt: **Figure 2** Configuring a security group rule
|
||||
|
||||
**Figure 2** Configuring a security group rule
|
||||
|
||||
13. Click **OK**.
|
||||
|
||||
**Delete old security group rules.**
|
||||
|
||||
14. Delete four old security group rules after the configured security group rule takes effect.
|
||||
|
||||
.. |image1| image:: /_static/images/en-us_image_0141273034.png
|
@ -1,2 +0,0 @@
|
||||
[html writers]
|
||||
table-style: table, caption-top
|
@ -1,8 +0,0 @@
|
||||
=====================================
|
||||
Virtual Private Cloud - Best Practice
|
||||
=====================================
|
||||
|
||||
.. toctree::
|
||||
:maxdepth: 1
|
||||
|
||||
best_practice/index
|
@ -1,11 +1,7 @@
|
||||
sphinx>=2.0.0,!=2.1.0 # BSD
|
||||
|
||||
otcdocstheme # Apache-2.0
|
||||
|
||||
# releasenotes
|
||||
reno>=3.1.0 # Apache-2.0
|
||||
|
||||
otc-sphinx-directives>=0.1.0
|
||||
sphinx-minify>=0.0.1 # Apache-2.0
|
||||
git+https://gitea.eco.tsi-dev.otc-service.com/infra/otc-metadata.git#egg=otc_metadata
|
||||
setuptools
|
||||
git+https://gitea.eco.tsi-dev.otc-service.com/infra/otc-metadata.git#egg=otc_metadata
|
@ -31,17 +31,6 @@ otcdocs_repo_name = 'docs/virtual-private-cloud'
|
||||
otcdocs_git_fqdn = 'gitea.eco.tsi-dev.otc-service.com'
|
||||
otcdocs_git_type = 'gitea'
|
||||
|
||||
# Those variables are needed for indexing into OpenSearch
|
||||
otcdocs_doc_environment = ''
|
||||
otcdocs_doc_link = ''
|
||||
otcdocs_doc_title = ''
|
||||
otcdocs_doc_type = ''
|
||||
otcdocs_service_category = 'network'
|
||||
otcdocs_service_title = 'Virtual Private Cloud'
|
||||
otcdocs_service_type = 'vpc'
|
||||
otcdocs_search_environment = 'hc_de'
|
||||
otcdocs_search_url = "https://opensearch.eco.tsi-dev.otc-service.com/"
|
||||
|
||||
# If extensions (or modules to document with autodoc) are in another directory,
|
||||
# add these directories to sys.path here. If the directory is relative to the
|
||||
# documentation root, use os.path.abspath to make it absolute, like shown here.
|
||||
|
@ -9,7 +9,6 @@ The Virtual Private Cloud (VPC) service enables you to provision logically isola
|
||||
|
||||
.. service_card::
|
||||
:service_type: vpc
|
||||
:environment: internal
|
||||
:umn: This document describes Virtual Private Cloud service, helping you quickly create and properly use the service.
|
||||
:api-ref: This document describes application programming interfaces (APIs) of Virtual Private Cloud (VPC) and provides API parameter description and example values.
|
||||
:best-practice: To use Virtual Private Cloud more securely, reliably, flexibly, and efficiently, you are advised to follow the following best practices.
|
||||
|
||||
|
BIN
umn/source/_static/images/en-us_image_0000001117669274.png
Normal file
After Width: | Height: | Size: 58 KiB |
BIN
umn/source/_static/images/en-us_image_0000001117669524.png
Normal file
After Width: | Height: | Size: 46 KiB |
BIN
umn/source/_static/images/en-us_image_0000001151300782.png
Normal file
After Width: | Height: | Size: 7.7 KiB |
BIN
umn/source/_static/images/en-us_image_0000001163949251.png
Normal file
After Width: | Height: | Size: 65 KiB |
Before Width: | Height: | Size: 40 KiB After Width: | Height: | Size: 40 KiB |
Before Width: | Height: | Size: 22 KiB After Width: | Height: | Size: 22 KiB |
BIN
umn/source/_static/images/en-us_image_0000001197228903.png
Normal file
After Width: | Height: | Size: 28 KiB |
BIN
umn/source/_static/images/en-us_image_0000001197426329.png
Normal file
After Width: | Height: | Size: 7.9 KiB |
BIN
umn/source/_static/images/en-us_image_0000001206933138.png
Normal file
After Width: | Height: | Size: 5.9 KiB |
BIN
umn/source/_static/images/en-us_image_0000001207093220.png
Normal file
After Width: | Height: | Size: 634 B |
BIN
umn/source/_static/images/en-us_image_0000001207253746.png
Normal file
After Width: | Height: | Size: 634 B |
BIN
umn/source/_static/images/en-us_image_0000001211006359.png
Normal file
After Width: | Height: | Size: 60 KiB |
BIN
umn/source/_static/images/en-us_image_0000001211445065.png
Normal file
After Width: | Height: | Size: 48 KiB |
BIN
umn/source/_static/images/en-us_image_0000001222749226.png
Normal file
After Width: | Height: | Size: 391 B |
BIN
umn/source/_static/images/en-us_image_0000001222749910.png
Normal file
After Width: | Height: | Size: 391 B |
Before Width: | Height: | Size: 17 KiB After Width: | Height: | Size: 17 KiB |
BIN
umn/source/_static/images/en-us_image_0000001229959315.png
Normal file
After Width: | Height: | Size: 34 KiB |
Before Width: | Height: | Size: 27 KiB After Width: | Height: | Size: 27 KiB |
Before Width: | Height: | Size: 13 KiB After Width: | Height: | Size: 13 KiB |
Before Width: | Height: | Size: 23 KiB After Width: | Height: | Size: 23 KiB |
BIN
umn/source/_static/images/en-us_image_0000001251773147.png
Normal file
After Width: | Height: | Size: 4.6 KiB |
BIN
umn/source/_static/images/en-us_image_0000001267230305.png
Normal file
After Width: | Height: | Size: 391 B |
BIN
umn/source/_static/images/en-us_image_0000001267350317.png
Normal file
After Width: | Height: | Size: 391 B |
Before Width: | Height: | Size: 3.3 KiB After Width: | Height: | Size: 3.3 KiB |
BIN
umn/source/_static/images/en-us_image_0000001286573614.png
Normal file
After Width: | Height: | Size: 7.7 KiB |
Before Width: | Height: | Size: 1004 B After Width: | Height: | Size: 1004 B |
Before Width: | Height: | Size: 128 B |
Before Width: | Height: | Size: 128 B |
Before Width: | Height: | Size: 38 KiB |
Before Width: | Height: | Size: 42 KiB |
Before Width: | Height: | Size: 128 B |
Before Width: | Height: | Size: 22 KiB |
Before Width: | Height: | Size: 128 B |
Before Width: | Height: | Size: 56 KiB |
Before Width: | Height: | Size: 32 KiB |