vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/vpc/umn/vpc_Concepts_0005.html
Qin Ying, Fan 38a9f4a4f1 VPC UMN 20230106 version 
Reviewed-by: Hajba, László Antal <laszlo-antal.hajba@t-systems.com>
Co-authored-by: Qin Ying, Fan <fanqinying@huawei.com>
Co-committed-by: Qin Ying, Fan <fanqinying@huawei.com>
2023-06-14 19:36:52 +00:00

5.6 KiB
Raw Blame History

Security Group

A security group is a collection of access control rules for cloud resources, such as cloud servers, containers, and databases, that have the same security protection requirements and that are mutually trusted. After a security group is created, you can create various access rules for the security group, these rules will apply to all cloud resources added to this security group.

Like whitelists, security group rules work as follows:
  • Inbound rule: If an inbound request matches the source in an inbound security group rule with Action set to Allow, the request is allowed.

    Unless otherwise specified, you do not need to configure deny rules in the inbound direction because requests that do not match allow rules will be denied.

  • Outbound rule: If the destination of an outbound security group rule with Action set to Allow is 0.0.0.0/0, all outbound requests are allowed.

    IPv4 default route: 0.0.0.0/0

    IPv6 default route: ::/0

Table 1 shows the inbound and outbound rules in security group sg-AB.
Table 1 Rules in security group sg-AB

Direction

Action

Protocol & Port

Source or Destination

Description

Inbound

Allow

All

Source: sg-AB

Allows access requests from security group sg-AB. This rule ensures that instances in the security group can communicate with each other.

Outbound

Allow

All

Destination: 0.0.0.0/0

Allows all requests in the security group to be sent out.
Parent topic: Basic Concepts