Skip to main content
Create a cloud firewall
Last update:

Create a cloud firewall


A cloud firewall has a basic property: all inbound and outbound traffic that is not allowed is denied. If you create a firewall without rules and assign it to a cloud router port, all traffic on the router's subnet will be denied. After creating a firewall on the router, all active sessions will be terminated.

  1. In Control Panel, go to Cloud PlatformFirewalls.

  2. Click Create Firewall.

  3. Select pool where the firewall will be created.

  4. Optional: select a private subnet with the cloud router for which you want to configure traffic filtering. A firewall is assigned to a cloud router port on this private subnet.

    Assign firewall to router port can be done after the firewall is created.

  5. Select the direction of traffic:

  1. If the templates with rules for inbound traffic are appropriate for you, click the rule. The Protocol, Source, Source Port, Traffic Destination, and Destination Port fields will be filled in automatically. Go to step 14.

  2. If there is no suitable template, add your own rule for incoming traffic. Click Add Incoming Traffic Rule.

  3. Select an action:

    • Allow — Allow traffic;
    • Deny — Deny traffic.
  4. Select a protocol: ICMP, TCP, UDP or All (Any).

  5. Enter the traffic source (Source) — IP address, subnet, or all addresses (Any).

  6. Enter the source port (Src. port) — a single port, a range of ports, or all ports (Any).

  7. Enter the traffic destination (Destination) — IP address, subnet, or Any. If you specify a subnet, the rule will apply to all devices on the subnet.

  8. Enter the destination port (Dst. port) — a single port, a range of ports, or all ports (Any).

    Traffic to any TCP/UDP port blocked in Selectel by default, will be denied even if you specify that port in the rule.

  9. Enter a name for the rule or leave the name created automatically.

  10. Optional: enter a comment for the rule.

  11. Press Add. After the firewall is created, you can edit the rule.

  1. Check the order of the rules, they are executed in order in the list — top to bottom. If necessary, change the order — drag and drop rules. After the firewall is created, you can change the order of the rules.
  2. Optional: To add another rule to the firewall, go to step 5. You can add up to 100 rules per traffic direction.
  3. Enter the name of the firewall or leave the name created automatically.
  4. Optional: enter a comment for the firewall.
  5. Click Create Firewall.