In Nanoode Cloud, a firewall is a security group. A cloud server is an instance.
In this example, we secure a public web server for both IPv4 and IPv6. The security group allows any HTTP and HTTPS inbound traffic. It also allows SSH and PING to this public web server from management IPv4 100.100.100.100 and IPv6 2600:2600:2600:2600:2600:2600:2600:2600.
- Log in to the dashboard.
- On the Compute tab click Access & Security category. The Security Groups tab shows the security groups that are available.
- Select a security group (such as, the "default" security group) and click Manage Rules.
- Click Add Rule.
- In the Add Rule dialog box, enter the following values and click Add:
- Rules for IPv4
- Allow HTTP from any IPv4
- Rule: HTTP
- Remote: CIDR
- CIDR: 0.0.0.0/0
- Allow HTTPS from any IPv4
- Rule: HTTPS
- Remote: CIDR
- CIDR: 0.0.0.0/0
- Allow SSH from IPv4 100.100.100.100
- Rule: SSH
- Remote: CIDR
- CIDR: 100.100.100.100/32
- Allow PING from IPv4 100.100.100.100
- Rule: ALL ICMP
- Remote: CIDR
- CIDR: 100.100.100.100/32
- Allow HTTP from any IPv4
- Rules for IPv6
- Allow HTTP from any IPv6
- Rule: HTTP
- Remote: CIDR
- CIDR: ::0/0
- Allow HTTPS from any IPv6
- Rule: HTTPS
- Remote: CIDR
- CIDR: ::0/0
- Allow SSH from IPv6 2600:2600:2600:2600:2600:2600:2600:2600
- Rule: SSH
- Remote: CIDR
- CIDR: 2600:2600:2600:2600:2600:2600:2600:2600/128
- Allow PING from IPv6 2600:2600:2600:2600:2600:2600:2600:2600
- Rule: ALL ICMP
- Remote: CIDR
- CIDR: 2600:2600:2600:2600:2600:2600:2600:2600/128
- Allow HTTP from any IPv6
- Rules for IPv4
- Now, the security group is ready to add to the public web server instance to secure this instance.
