Compare commits

..

15 Commits

652 changed files with 10129 additions and 9973 deletions

Binary file not shown.

Before

Width:  |  Height:  |  Size: 33 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 97 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 306 B

Binary file not shown.

Before

Width:  |  Height:  |  Size: 42 KiB

View File

@ -1,16 +0,0 @@
:original_name: bestpractice_0001.html
.. _bestpractice_0001:
Best Practice
=============
- :ref:`VPC and Subnet Planning Suggestions <bestpractice_0002>`
- :ref:`Using IP Address Groups to Reduce the Number of Security Group Rules <bestpractice_0013>`
.. toctree::
:maxdepth: 1
:hidden:
vpc_and_subnet_planning_suggestions
using_ip_address_groups_to_reduce_the_number_of_security_group_rules

View File

@ -1,96 +0,0 @@
:original_name: bestpractice_0013.html
.. _bestpractice_0013:
Using IP Address Groups to Reduce the Number of Security Group Rules
====================================================================
Scenarios
---------
Finance and securities enterprises have high security requirements when planning cloud networks. Access to servers is often controlled based on IP addresses. To simplify security group rule configuration and provide refined security control, you can use IP address groups in case of the following scenarios:
- A security group has more than 40 rules.
- The direction, type, protocol, and port of security group rules are the same except the address.
Constraints
-----------
- An IP address group can contain a maximum of 20 IP addresses or IP address ranges.
Prerequisites
-------------
You have created one or more security groups for access control.
Typical Case
------------
For example, you plan to configure the following rules for security group A.
========= ==== ======== ========== =========================
Direction Type Protocol Port Range Source/Destination
========= ==== ======== ========== =========================
Inbound IPv4 TCP 22122 Source: 11.19.255.64/30
Inbound IPv4 TCP 22122 Source: 113.31.128.252/30
Inbound IPv4 TCP 22122 Source: 113.31.138.0/25
Inbound IPv4 TCP 22122 Source: 183.232.25.208/28
========= ==== ======== ========== =========================
The four inbound rules have the same port, type, and protocol but different source IP addresses. In this case, you can use an IP address group to reconfigure the security group rules.
Procedure
---------
**Create an IP address group.**
#. Log in to the management console.
#. Click |image1| in the upper left corner and Under **Network**, click **Elastic Load Balancing**.
#. In the navigation pane on the left, choose **IP Address Groups**.
#. Click **Create IP Address Group**.
#. Set the parameters.
- **Name**: **ipGroup-A**
- **IP Address**:
11.19.255.64/30
113.31.128.252/30
113.31.138.0/25
183.232.25.208/28
.. figure:: /_static/images/en-us_image_0000001124559441.png
:alt: **Figure 1** Creating an IP address group
**Figure 1** Creating an IP address group
#. Click **OK**.
**Configure a security group rule.**
8. Click |image1| in the upper left corner and Under **Network**, click **Virtual Private Cloud**.
9. In the navigation pane on the left, choose **Access Control** > **Security Groups**.
10. Locate security group A and click **Manage Rule** in the **Operation** column.
11. Under **Inbound Rules**, click **Add Rule**.
12. Set the parameters.
- **Protocol & Port**: **TCP** and **22122**
- **Type**: **IPv4**
- **Source**: **ipGroup-A**
.. figure:: /_static/images/en-us_image_0000001124559429.png
:alt: **Figure 2** Configuring a security group rule
**Figure 2** Configuring a security group rule
13. Click **OK**.
**Delete old security group rules.**
14. Delete four old security group rules after the configured security group rule takes effect.
.. |image1| image:: /_static/images/en-us_image_0141273034.png

File diff suppressed because it is too large Load Diff

View File

@ -1,2 +0,0 @@
[html writers]
table-style: table, caption-top

View File

@ -1,8 +0,0 @@
=====================================
Virtual Private Cloud - Best Practice
=====================================
.. toctree::
:maxdepth: 1
best_practice/index

View File

@ -1,11 +1,7 @@
sphinx>=2.0.0,!=2.1.0 # BSD sphinx>=2.0.0,!=2.1.0 # BSD
otcdocstheme # Apache-2.0 otcdocstheme # Apache-2.0
# releasenotes # releasenotes
reno>=3.1.0 # Apache-2.0 reno>=3.1.0 # Apache-2.0
otc-sphinx-directives>=0.1.0 otc-sphinx-directives>=0.1.0
sphinx-minify>=0.0.1 # Apache-2.0 git+https://gitea.eco.tsi-dev.otc-service.com/infra/otc-metadata.git#egg=otc_metadata
git+https://gitea.eco.tsi-dev.otc-service.com/infra/otc-metadata.git#egg=otc_metadata
setuptools

View File

@ -31,17 +31,6 @@ otcdocs_repo_name = 'docs/virtual-private-cloud'
otcdocs_git_fqdn = 'gitea.eco.tsi-dev.otc-service.com' otcdocs_git_fqdn = 'gitea.eco.tsi-dev.otc-service.com'
otcdocs_git_type = 'gitea' otcdocs_git_type = 'gitea'
# Those variables are needed for indexing into OpenSearch
otcdocs_doc_environment = ''
otcdocs_doc_link = ''
otcdocs_doc_title = ''
otcdocs_doc_type = ''
otcdocs_service_category = 'network'
otcdocs_service_title = 'Virtual Private Cloud'
otcdocs_service_type = 'vpc'
otcdocs_search_environment = 'hc_de'
otcdocs_search_url = "https://opensearch.eco.tsi-dev.otc-service.com/"
# If extensions (or modules to document with autodoc) are in another directory, # If extensions (or modules to document with autodoc) are in another directory,
# add these directories to sys.path here. If the directory is relative to the # add these directories to sys.path here. If the directory is relative to the
# documentation root, use os.path.abspath to make it absolute, like shown here. # documentation root, use os.path.abspath to make it absolute, like shown here.

View File

@ -9,7 +9,6 @@ The Virtual Private Cloud (VPC) service enables you to provision logically isola
.. service_card:: .. service_card::
:service_type: vpc :service_type: vpc
:environment: internal
:umn: This document describes Virtual Private Cloud service, helping you quickly create and properly use the service. :umn: This document describes Virtual Private Cloud service, helping you quickly create and properly use the service.
:api-ref: This document describes application programming interfaces (APIs) of Virtual Private Cloud (VPC) and provides API parameter description and example values. :api-ref: This document describes application programming interfaces (APIs) of Virtual Private Cloud (VPC) and provides API parameter description and example values.
:best-practice: To use Virtual Private Cloud more securely, reliably, flexibly, and efficiently, you are advised to follow the following best practices.

97
tox.ini

File diff suppressed because it is too large Load Diff

Binary file not shown.

After

Width:  |  Height:  |  Size: 58 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 46 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 7.7 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 65 KiB

View File

Before

Width:  |  Height:  |  Size: 40 KiB

After

Width:  |  Height:  |  Size: 40 KiB

View File

Before

Width:  |  Height:  |  Size: 22 KiB

After

Width:  |  Height:  |  Size: 22 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 28 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 7.9 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 5.9 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 634 B

Binary file not shown.

After

Width:  |  Height:  |  Size: 634 B

Binary file not shown.

After

Width:  |  Height:  |  Size: 60 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 48 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 391 B

Binary file not shown.

After

Width:  |  Height:  |  Size: 391 B

View File

Before

Width:  |  Height:  |  Size: 17 KiB

After

Width:  |  Height:  |  Size: 17 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 34 KiB

View File

Before

Width:  |  Height:  |  Size: 27 KiB

After

Width:  |  Height:  |  Size: 27 KiB

View File

Before

Width:  |  Height:  |  Size: 13 KiB

After

Width:  |  Height:  |  Size: 13 KiB

View File

Before

Width:  |  Height:  |  Size: 23 KiB

After

Width:  |  Height:  |  Size: 23 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 4.6 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 391 B

Binary file not shown.

After

Width:  |  Height:  |  Size: 391 B

View File

Before

Width:  |  Height:  |  Size: 3.3 KiB

After

Width:  |  Height:  |  Size: 3.3 KiB

Binary file not shown.

After

Width:  |  Height:  |  Size: 7.7 KiB

View File

Before

Width:  |  Height:  |  Size: 1004 B

After

Width:  |  Height:  |  Size: 1004 B

Binary file not shown.

Before

Width:  |  Height:  |  Size: 128 B

Binary file not shown.

Before

Width:  |  Height:  |  Size: 128 B

Binary file not shown.

Before

Width:  |  Height:  |  Size: 38 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 42 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 128 B

Binary file not shown.

Before

Width:  |  Height:  |  Size: 22 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 128 B

Binary file not shown.

Before

Width:  |  Height:  |  Size: 56 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 32 KiB

Some files were not shown because too many files have changed in this diff Show More