forked from docs/doc-exports
Qin Ying, Fan
62b5636b2d
Reviewed-by: Kucerak, Kristian <kristian.kucerak@t-systems.com> Co-authored-by: Qin Ying, Fan <fanqinying@huawei.com> Co-committed-by: Qin Ying, Fan <fanqinying@huawei.com>
53 lines
5.0 KiB
HTML
53 lines
5.0 KiB
HTML
<a name="SecurityGroup_0003"></a><a name="SecurityGroup_0003"></a>
|
|
|
|
<h1 class="topictitle1">Default Security Groups and Security Group Rules</h1>
|
|
<div id="body8662426"><p id="SecurityGroup_0003__en-us_topic_0118534003_p9223113110710">Your account automatically comes with a default security group. The default security group allows all outbound traffic, denies all inbound traffic, and allows all traffic between cloud resources in the group. Your cloud resources in this security group can communicate with each other already without adding additional rules.</p>
|
|
<p id="SecurityGroup_0003__en-us_topic_0118534003_p1480513558383"><a href="#SecurityGroup_0003__en-us_topic_0118534003_fig997718156161">Figure 1</a> shows the default security group rules. The following uses access between ECSs as an example.</p>
|
|
<div class="fignone" id="SecurityGroup_0003__en-us_topic_0118534003_fig997718156161"><a name="SecurityGroup_0003__en-us_topic_0118534003_fig997718156161"></a><a name="en-us_topic_0118534003_fig997718156161"></a><span class="figcap"><b>Figure 1 </b>Default security group</span><br><span><img class="eddx" id="SecurityGroup_0003__en-us_topic_0118534003_image22171236172514" src="en-us_image_0000001230120807.png"></span></div>
|
|
<p id="SecurityGroup_0003__en-us_topic_0118534003_p14738751115618"><a href="#SecurityGroup_0003__en-us_topic_0118534003_table493045171919">Table 1</a> describes the default rules for the default security group.</p>
|
|
|
|
<div class="tablenoborder"><a name="SecurityGroup_0003__en-us_topic_0118534003_table493045171919"></a><a name="en-us_topic_0118534003_table493045171919"></a><table cellpadding="4" cellspacing="0" summary="" id="SecurityGroup_0003__en-us_topic_0118534003_table493045171919" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Default security group rules</caption><thead align="left"><tr id="SecurityGroup_0003__en-us_topic_0118534003_row12930145141920"><th align="left" class="cellrowborder" valign="top" width="11.83%" id="mcps1.3.5.2.6.1.1"><p id="SecurityGroup_0003__en-us_topic_0118534003_p3930145118194">Direction</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="11.97%" id="mcps1.3.5.2.6.1.2"><p id="SecurityGroup_0003__en-us_topic_0118534003_p129301851131913">Protocol</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="15%" id="mcps1.3.5.2.6.1.3"><p id="SecurityGroup_0003__en-us_topic_0118534003_p093075141919">Port/Range</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="25.22%" id="mcps1.3.5.2.6.1.4"><p id="SecurityGroup_0003__en-us_topic_0118534003_p149306511191">Source/Destination</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="35.980000000000004%" id="mcps1.3.5.2.6.1.5"><p id="SecurityGroup_0003__en-us_topic_0118534003_p99301851161916">Description</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="SecurityGroup_0003__en-us_topic_0118534003_row17931125111193"><td class="cellrowborder" valign="top" width="11.83%" headers="mcps1.3.5.2.6.1.1 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p1593111518191">Outbound</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.97%" headers="mcps1.3.5.2.6.1.2 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p19931105117191">All</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.5.2.6.1.3 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p15931651181920">All</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.22%" headers="mcps1.3.5.2.6.1.4 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p179318515196">Destination: 0.0.0.0/0</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="35.980000000000004%" headers="mcps1.3.5.2.6.1.5 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p49315518196">Allows all outbound traffic.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="SecurityGroup_0003__en-us_topic_0118534003_row109311451131911"><td class="cellrowborder" valign="top" width="11.83%" headers="mcps1.3.5.2.6.1.1 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p1293111513193">Inbound</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="11.97%" headers="mcps1.3.5.2.6.1.2 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p1493105115194">All</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.5.2.6.1.3 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p1593155181920">All</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="25.22%" headers="mcps1.3.5.2.6.1.4 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p593115141917">Source: the current security group (for example, sg-<em id="SecurityGroup_0003__en-us_topic_0118534003_i2138146127154428">xxxxx</em>)</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="35.980000000000004%" headers="mcps1.3.5.2.6.1.5 "><p id="SecurityGroup_0003__en-us_topic_0118534003_p2931151121912">Allows communications among ECSs within the security group and denies all inbound traffic (incoming data packets).</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="vpc_SecurityGroup_0001.html">Security Group</a></div>
|
|
</div>
|
|
</div>
|
|
|