Skip to main content

Firewalls

A firewall lets you control the incoming and outgoing network traffic from your cluster or instance. The Default firewall in each region has all ports open, but we strongly recommend you customize your firewalls for security reasons.

Firewalls are specific to a region and network: If you have a firewall in network A, it can only be used by resources running in network A.

Listing firewalls

On the dashboard, you can list and manage firewalls through the networking/firewalls section. In this view, you will see the firewalls by name, along with instances and clusters that are assigned to use them. By dropping down on the "Actions" button, you will be able to manage firewall rules or delete the firewall.

Creating a firewall

Click "Create a firewall" at the top of the firewalls listing page.

Enter a name for the firewall, and choose the network it belongs to. You can either choose the Default network or one of the networks created over in the network section. (Read more about networks).

Entering a name for a new firewall

Once the firewall is created, you can customise the inbound and outbound traffic rules. You can do so by dropping down the "Actions" menu and selecting "Rules":

Firewall actions menu

This will allow you to specify a single port, or a port range, the protocol, direction and whether the rule is to allow or deny traffic:

Firewall rules panel

Resources that are created or already running in the same network as the firewall can then be configured to use that firewall to control network traffic.

Deleting a firewall

note

You cannot delete a firewall if an instance, cluster or other type of resource is using it. Change the firewall of such resources to be able to delete a firewall.

On the web, you can delete a firewall from the firewalls listing page, using the Actions menu on the row of the firewall you want to delete.

Firewall actions menu

The system will prompt you to confirm the name of the firewall to delete. When you confirm the firewall name, the system will proceed to delete it immediately.