Firewalls
Create a firewall on an external network and manage the inbound traffic to allow with rules.
List screen
View the firewall list under Network → Firewalls in the sidebar.
| Column | Description |
|---|---|
| Status | Firewall status (Creating, Active, Deleting, Error) |
| Name | Firewall name. Click it to open the detail screen |
| External network | The external network the firewall protects |
| Rules | Number of registered inbound rules |
| Created at | Creation date and time |
| Action | Row menu: Edit, Delete |
Above the list are a search field, the Create firewall button, and a Delete button that removes the selected firewalls.
Create a firewall
- Click Create firewall.
- Fill in the fields below and create it.
| Field | Description |
|---|---|
| Firewall name | 2 to 128 characters. Letters, numbers, - _ . are allowed, and it must start with a letter or number. A name already in use cannot be used |
| External Network | The external network the firewall will protect. A network that already has a firewall cannot be selected |
Detail screen
Click a firewall name to open its detail screen. Status, ID, External network, and Created at are shown at the top, with Edit and Delete buttons at the top right. Below is the Inbound rules tab.
Inbound rules
Inbound traffic that does not match a rule is denied, and outbound traffic is not controlled by this firewall. With no rules, all traffic coming in from outside is denied.
| Column | Description |
|---|---|
| Status | Rule status (Creating, Active, Deleting, Error) |
| Source CIDR | Source address range |
| Source port | Source port |
| Destination CIDR | Destination address range |
| Destination port | Destination port |
| Protocol | Protocol |
| Action | Row menu: Delete |
Fields with no value are shown as ANY. Above the tab are a search field, CSV download, and the Add rules button.
Add a rule
- Click Add rules.
- Fill in the fields below and click Add.
| Field | Description |
|---|---|
| Protocol | Select ANY, TCP, UDP, SCTP, or ICMP4. ANY applies to TCP, UDP, SCTP, and ICMP4 |
| Source CIDR | IPv4 CIDR. Leave empty for ANY (0.0.0.0/0) |
| Source port | A port or range between 1 and 65535. Leave empty for ANY. Not available for ICMP4 |
| Destination CIDR | IPv4 CIDR. Leave empty for ANY (0.0.0.0/0) |
| Destination port | A port or range between 1 and 65535. Leave empty for ANY. Not available for ICMP4 |
Allow-all rule
Leaving the source, destination, and ports all empty creates a rule that allows all inbound traffic. A warning appears in the form, so specify a destination or source to limit exposure.
Delete a rule
Select Delete from the Action menu on the rule row. Deletion cannot be undone, and traffic previously allowed by the rule is denied. Rules cannot be edited, so to change one, delete it and add it again.
Edit a firewall
Select Edit from the row menu in the list or on the detail screen. Only the name can be changed; the external network cannot.
Delete a firewall
Delete from the row menu in the list, the Delete button above the list (multiple selection), or the Delete button on the detail screen.
Before you delete
Deleting a firewall removes all inbound allow rules for that external network and cannot be undone.