vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/dds/umn/dds_02_0005.html
Wang , Deng Ke 519944c837 DDS UMN 20221101 version 
Reviewed-by: Hasko, Vladimir <vladimir.hasko@t-systems.com>
Co-authored-by: Wang , Deng Ke <wangdengke2@huawei.com>
Co-committed-by: Wang , Deng Ke <wangdengke2@huawei.com>
2022-11-24 09:05:29 +00:00

7.5 KiB
Raw Permalink Blame History

Setting a Security Group

Scenarios

This section guides you on how to add a security group rule to control access from and to DDS DB instances in a security group.

Background Information

You can access a DDS DB instance in either of the following ways:

  • Public network
  • Internal network

Precautions

The default security group rule allows all outgoing data packets. ECSs and DDS DB instances can access each other in the same security group. After a security group is created, you can add security group rules to control the access from and to the DDS DB instances in the security group.

By default, a tenant can create a maximum of 500 security group rules. An excessive number of security group rules increases the network latency of the first packet. It is recommended that you add a maximum of 50 rules for each security group.

To access the DDS DB instances in a security group from external resources, create an inbound rule for the security group.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and select a region and project.
  3. Click Service List. Under Network, click Virtual Private Cloud.
  4. In the navigation pane on the left, choose Access Control > Security Groups.
  5. On the Security Group page, click the security group name.
  6. On the Inbound Rules tab, click Add Rule. In the displayed Add Inbound Rule dialog box, set required parameters to add inbound rules. On the Outbound Rules tab, click Add Rule. In the displayed Add Outbound Rule dialog box, set required parameters to add outbound rules.
  7. Add a security group rule as prompted.

    Table 1 Field description

    Parameter

    Description

    Value Example

    Protocol

    Specifies the network protocol. Allows all traffic or supports user-defined protocols, TCP, UDP, ICMP, and SSH.

    TCP

    Port

    Specifies the port allowing the access to ECSs or external devices.

    8635

    Source/Destination

    Specifies the supported IP address and security group.

    • IP address: indicates that the security group rule takes effect in a specified IP address range.
      • xxx.xxx.xxx.xxx/32 (IPv4)
      • xxx.xxx.xxx.0/24 (subnet)
      • 0.0.0.0/0 (any IP address)
    • Security group: indicates that this rule allows all IP addresses of ECSs to access DDS DB instances in the same specified security group.
    • 192.168.10.0/24
    • default

  8. Click OK.