Guide: Security Group: Difference between revisions

From bwCloud-OS
Jump to navigation Jump to search
Created page with "➡️ '''Back to the FAQ for''' '''Security Groups.'''"
 
No edit summary
 
(3 intermediate revisions by the same user not shown)
Line 1: Line 1:
➡️ '''Back to the FAQ for''' '''[[Security|Security Groups]].'''
➡️ '''Back to the FAQ for''' '''[[Security|Security Groups]].'''
__TOC__
== Optional Security Groups ==
=== ufr_only ===
Information provided without guarantee! Create a security group ''ufr_only'', allowing only ingress to your service, running on Port <code>8080</code> from the IP ranges used by the University Freiburg. This security group must be assigned to your VM, e.g. ''myVM''.
openstack security group create ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '132.230.0.0/16' \
    ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '192.52.50.0/24' \
    ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '10.0.0.0/8' \
    ufr_only
openstack server add security group myVM ufr_only
__TOC__

Latest revision as of 10:29, 22 January 2026

➡️ Back to the FAQ for Security Groups.

Optional Security Groups

ufr_only

Information provided without guarantee! Create a security group ufr_only, allowing only ingress to your service, running on Port 8080 from the IP ranges used by the University Freiburg. This security group must be assigned to your VM, e.g. myVM.

openstack security group create ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '132.230.0.0/16' \
    ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '192.52.50.0/24' \
    ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '10.0.0.0/8' \
    ufr_only
openstack server add security group myVM ufr_only