Guide: Security Group: Difference between revisions

From bwCloud-OS
Jump to navigation Jump to search
Created page with "➡️ '''Back to the FAQ for''' '''Security Groups.'''"
 
No edit summary
Line 1: Line 1:
➡️ '''Back to the FAQ for''' '''[[Security|Security Groups]].'''
➡️ '''Back to the FAQ for''' '''[[Security|Security Groups]].'''
== Optional Security Groups ==
=== ufr_only ===
Create a security group ''ufr_only'', allowing only ingress to your service from the IP-ranges used by the University Freiburg. This security group must be assigned to your VM, e.g. ''myVM''.
openstack security group create ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '132.230.0.0/16' \
    ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '192.52.50.0/24' \
    ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '10.0.0.0/8' \
    ufr_only
openstack server add security group myVM ufr_only
__TOC__

Revision as of 13:08, 16 January 2026

➡️ Back to the FAQ for Security Groups.

Optional Security Groups

ufr_only

Create a security group ufr_only, allowing only ingress to your service from the IP-ranges used by the University Freiburg. This security group must be assigned to your VM, e.g. myVM.

openstack security group create ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '132.230.0.0/16' \
    ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '192.52.50.0/24' \
    ufr_only
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '10.0.0.0/8' \
    ufr_only
openstack server add security group myVM ufr_only