Create and attach a firewall

Before you begin

Firewalls provide the following traffic control capabilities:

• Traffic control between private networks
• Ingress and egress traffic control for instances, private networks, and Auto Scaling Groups (ASGs)
• Internet traffic control based on subnets (CIDR blocks), hosts, and interfaces
• Policy application to instances, specific interfaces, private networks, and ASGs

Conditions for firewall usage

Where you can apply a firewall depends on its attachment point:

Attachment point	Valid targets
Private network	Other private networks only
Instance	Instances and ASGs

Create a firewall

1. In the CubeCMP management console, go to the Networking page.

2. Navigate to the Firewall tab.

3. Click + Add Firewall to start the firewall creation flow.

4. Fill in the Name and Description block:

   • Name: Enter a name for the firewall.
   • Description (Optional): Enter a description for the firewall.

5. Configure the firewall rules:

   1. Click + Add Rule.
   2. Select a Direction: Inbound or Outbound.
      • Inbound: Allow or deny incoming traffic to your entities or network.
      • Outbound: Allow or deny outgoing traffic from your entities or network.
   3. Select the Protocol. Choose a common protocol, or select TCP or UDP to specify custom ports.
   4. Select the Source to filter traffic by source IP address:
      • Specify IP range: Enter a custom IP range.
      • Specify Private Networks: Select one or more private networks.
   tip

   Repeat step 5 to add multiple rules to the same firewall before creating it.

6. In the Apply Scope block, apply the firewall to your entities or network:

   • Apply to Entities:
     • Apply to Instance: Select instances to apply the firewall to.
     • Apply to Auto Scaling Group: Select ASGs to apply the firewall to.
   • Apply to Network: Select private networks to apply the firewall to.

7. Click Create Firewall.

Attach a firewall to additional resources

After you create a firewall, you can attach it to more instances, ASGs, or private networks at any time.

1. Navigate to Networking > Firewall.
2. Click the firewall you want to attach.
3. In the Rules tab, verify the rules are configured correctly.

Then, depending on the resource type, follow the corresponding tab below.

Instances

1. Switch to the Instances tab.
2. From the Apply to More Instances dropdown menu, select the instances to attach the firewall to.
3. Click Apply.

Auto Scaling Groups

1. Switch to the Auto Scaling Groups tab.
2. From the Apply to More Auto Scaling Groups dropdown menu, select the ASGs to attach the firewall to.
3. Click Apply.

Private Networks

1. Switch to the Private Networks tab.
2. From the Apply to More Private Networks dropdown menu, select the private networks to attach the firewall to.
3. Click Apply.