Firewall groups

A firewall group is a set of inbound rules, applied at the network's edge before traffic reaches your servers. Anything no rule allows is dropped. Outgoing traffic isn't filtered. Firewall groups are free.

Creating a group

1. Choose Network › Firewall Groups › New firewall group.

2. Leave Let SSH in from anywhere ticked unless you'll add your own SSH rule.

3. Choose Create group.

Adding rules

Open the group and use Add a rule:

• Version: IPv4 or IPv6.

• Protocol: TCP, UDP, ICMP, GRE, ESP or AH.

• Port or range: like 443, or 8000:9000. For TCP and UDP only.

• From: Anywhere, or a specific address or range.

Servers in the group get new rules within a minute. To change a rule, delete it and add it again.

A group with no rules lets nothing in, not even SSH.

Putting a server in a group

• Choose a group when you deploy (under Advanced).

• Or use the Firewall group card on the server's page.

A server can be in one group. Bare metal servers can't join firewall groups.