Shulou(Shulou.com)06/02 Report--

This article shows you how to configure a CVM security group. The content is concise and easy to understand, which will definitely brighten your eyes. I hope you can gain something through the detailed introduction of this article.

Security group rules control the inbound traffic that is allowed to reach the physical server associated with the security group, and the outbound traffic that is allowed to leave the physical server (filtering rules from top to bottom). By default, the new security group will All Drop all traffic, and the physical server will bind an irregular security group to deny all traffic.

The security group feature of Tencent Cloud CPM is realized by setting iptables rules in the host security component (Cloud Mirror) by creating an iptables custom chain. A security group corresponds to a custom chain, and the security group rules are written into the corresponding custom chain to realize the network access control function.

1. The source. Source refers to the source of the traffic. You can enter either the IP address or CIDR. Represents traffic from this source.

two。 Protocol port. Need to fill in the protocol, there are four main port protocols, TCP, UDP, ICMP, ALL, you can enter one port, you can enter several discontiguous ports (separated by commas), or you can enter consecutive ports (use "-").

3. strategy. There are two choices, allow or deny, whether to allow or not to allow traffic that meets the above two conditions. At the end of the set security group policy, the system automatically adds a "ALL ALL reject", that is, those that do not add permission will be rejected.

Priority problem: for the traffic passing through the security group, it will match from top to bottom. If the match is successful, the policy will be executed. If the match is not successful, the next one will be matched. In other words, the priority above will be higher than the priority below.

The above content is how to configure the CVM security group. Have you learned any knowledge or skills? If you want to learn more skills or enrich your knowledge reserve, you are welcome to follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.