This is an automated email from the ASF dual-hosted git repository.
weizhouapache pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/cloudstack-documentation.git
The following commit(s) were added to refs/heads/main by this push:
new 9b630462 Add section about Firewall rules on a public IP address in a
VPC (#633)
9b630462 is described below
commit 9b6304624205ac0dedd70e9b5e5ba9949a1c0c8d
Author: Harikrishna <[email protected]>
AuthorDate: Mon Jul 13 12:44:57 2026 +0530
Add section about Firewall rules on a public IP address in a VPC (#633)
* Add section about Firewall rules on a public IP address in a VPC
* Added screenshot and some corrections
* Add details about vpc offering
---
source/_static/images/firewall_rule_in_vpc.png | Bin 0 -> 265445 bytes
.../networking/virtual_private_cloud_config.rst | 36 +++++++++++++++++++++
2 files changed, 36 insertions(+)
diff --git a/source/_static/images/firewall_rule_in_vpc.png
b/source/_static/images/firewall_rule_in_vpc.png
new file mode 100644
index 00000000..449a2daf
Binary files /dev/null and b/source/_static/images/firewall_rule_in_vpc.png
differ
diff --git a/source/adminguide/networking/virtual_private_cloud_config.rst
b/source/adminguide/networking/virtual_private_cloud_config.rst
index 2a2bb57d..17cc2680 100644
--- a/source/adminguide/networking/virtual_private_cloud_config.rst
+++ b/source/adminguide/networking/virtual_private_cloud_config.rst
@@ -953,6 +953,40 @@ function only if they are defined on the default network.
#. Select the tier and the destination Instance, then click Apply.
+.. _adding-firewall-rules-on-a-public-IP-address-in-a-VPC:
+
+Adding Firewall rules on a public IP address in a VPC
+~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+
+In a VPC, once the public IP address is acquired, you can create firewall rules
+for the public IP address. Firewall rules are created to allow traffic from
+specified source CIDRs to a tier through the selected public IP address. For
+example, you can create a firewall rule to allow SSH or HTTP traffic to the Web
+tier.
+
+Firewall rule management in a VPC depends on the Firewall service capability
+configured in the VPC offering. When creating the VPC, use a VPC offering that
+includes the Firewall service with VpcVirtualRouter as its provider.
+
+Steps to add a firewall rule on a public IP address in a VPC are as follows:
+
+#. Log in to the CloudStack UI.
+#. In the left navigation, choose Network.
+#. In the Select view, select VPC.
+#. Enter Public IP addresses section and click on the
+ Public IP Address to which you want to add firewall rules.
+#. Click the Firewall Rules tab, which will appear only if the public IP
address is associated with a tier.
+#. Click Add Firewall Rule and specify the following:
+
+ - *Source CIDR* - The CIDR that defines the source of the traffic.
+
+ - *Protocol* - The protocol that defines the type of traffic.
+
+ - *Start Port* and *End Port* - The port range that defines the destination
of the traffic.
+ If you are opening a single port, use the same number in both fields.
+
+ |firewall_rule_in_vpc.png|
+
Adding Load Balancing Rules on a VPC
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -1515,3 +1549,5 @@ is not required.
:alt: button to remove a VPC
.. |restart-vpc.png| image:: /_static/images/restart-vpc.png
:alt: button to restart a VPC
+.. |firewall_rule_in_vpc.png| image:: /_static/images/firewall_rule_in_vpc.png
+ :alt: Firewall rule in VPC.
