Create and manage cloud security groups

The Security Groups page lets you view, create and manage your security groups.

Steps

1. 1
   Navigate to Network > Security Groups.
2. 2
   The Create Security Group button allows you to create new security groups
3. 3
   The Delete Security Group button allows you to delete existing security groups.
4. 4
   The Security Group table shows a list of your current security groups:

• Name: Name of the security group.
• Security Group ID: Unique identifier of the security group within the xneelo Cloud platform.
• Description: What this security group is used for.

1. 5
   The Actions column provides a list of actions you can perform on each security group:

• Manage Rules: Create and delete ingress and egress rules.
• Edit Security Group: Update name and description fields.
• Delete Security Group: Permanently remove a security group and associated rules.

Read through the sections below for step-by-step guides on each action.

Each project includes a default security group with commonly used rules.

This group contains basic rules that allow:

• All outbound traffic
• SSH access (port 22)
• ICMP (ping)

The default security group cannot be deleted, but its rules can be modified. However, it is recommended to create separate security groups for custom access requirements.

Creating a new security group allows you to define custom access rules for your instances.

When creating a new security group:

• There are no ingress rules set by default, so no inbound traffic is allowed
• There will be 2 egress rules set by default, so all outgoing traffic for IPV4 and IPV6 is allowed.

Once created, you can add rules based on your requirements.

Steps

1. 1
   Navigate to Network > Security Groups.
2. 2
   Click on the + Create Security Group button. The Create Security Group dialog will appear.
3. 3
   In the Name field provide a name for the new security group. Names are not unique identifiers; multiple security groups may have the same name.
4. 4
   In the Description field specify what this security group will be used for.
5. 5
   Click on the Create Security Group button to confirm the action.
6. 6
   The Manage Security Group Rules page will display.
7. 7
   Proceed to add new rules (see steps below).

You can add rules to allow specific inbound or outbound traffic. Any changes are applied immediately to all instances using the security group.

As a best practice, only allow the traffic required for your application.

Note: Outbound port 25 (SMTP) is blocked on the Public network, even if an egress rule allows it. To send email on port 25, your project must be approved for port 25 access and your instance must use the Public SMTP network. Request port 25 access via Live Chat. Learn how to enable port 25 access in xneelo Cloud.

Steps

1. 1
   Navigate to Network > Security Groups.
2. 2
   Find the security group that you want to update.
3. 3
   Click Manage Rules.
4. 4
   Click Add Rule.
5. 5
   In the Rule field, choose the type of rule you want to create.
   You can select a predefined rule (for example, SSH or HTTP) or create a Custom Rule.
6. 6
   In the Description field, enter a short description for the rule.
7. 7
   In the Direction field select whether the rule applies to:
   

• Ingress – incoming traffic to the instance
• Egress – outgoing traffic from the instance

1. 8
   In the Open Port field select the port configuration:

• A single port
• A port range
• All ports (not recommended)

1. 9
   If Single port is selected, enter the port number in the Port field.
   
2. 10
   If Port range is selected, specify the From Port and To Port values.
   
3. 11
   In the Remote field, choose the source or destination for the traffic:

• CIDR – an IP address or range of IP addresses
• Security Group – allow traffic from instances using another security group

1. 12
   If Security Group is selected, choose the Ether Type:

• IPv4
• IPv6

1. 13
   Click Add to create the rule.

You can view the rules configured for a security group.

Steps

1. 1
   Navigate to Network > Security Groups.
2. 2
   Find the security group that you want to view.
3. 3
   Click on the Manage Rules button.
4. 4
   The table shows:

• Direction: The traffic direction this rule allows (ingress or egress).
• Ether Type: Whether the rule is set for IPV4 or IPV6.
• IP Protocol: The internet protocol this rule allows.
• Port Range: A single port or range of ports this rule allows.
• Remote IP Prefix: The IP address block (CIDR) this rule allows through.
• Remote Security Group: Access is allowed for any IP addresses in this security group.
• Description: What this rule is used for.

You can remove rules to restrict traffic or clean up unused configurations. Any changes are applied immediately to all instances using the security group.

Steps

1. 1
   Navigate to Network > Security Groups.
2. 2
   Find the security group that you want to update.
3. 3
   Click Manage Rules.
4. 4
   Find the rule you want to remove.
5. 5
   Click Delete Rule next to the rule.

You can add or remove security groups on an instance at any time.

When multiple security groups are assigned, their rules are combined to control the instance’s traffic.

Take a look at how to manage cloud instances and follow the steps in the Edit security groups section.

Deleting a security group is permanent and cannot be recovered.

Security groups that are in use cannot be deleted. You will need to remove the security group from any instances or ports and then retry the deletion.

Steps

1. 1
   Navigate to Network > Security Groups.
2. 2
   Find the security group that you want to delete.
3. 3
   Select the checkbox next to the name.
4. 4
   The Delete Security Groups button will activate.
5. 5
   Select the Delete Security Groups button.