Re: Allowing all ingress traffic except specific protocols or CIDRs in security groups

2023-11-28 Thread Fariborz Navidan
Hi Wei, I will create an issue for this on GitHub. This feature allows us to provide basic firewall on VM basis to our customers. Regards. On Tue, 28 Nov 2023, 11:11 Wei ZHOU, wrote: > Hi Fariborz, > > Currently there is no options for action (allow/deny) for each rule, all > rules are allowe

Re: Allowing all ingress traffic except specific protocols or CIDRs in security groups

2023-11-27 Thread Wei ZHOU
Hi Fariborz, Currently there is no options for action (allow/deny) for each rule, all rules are allowed. I think it is a good feature to support action (allow/deny) and rule number (so rules are ordered) in security groups rules, like the network ACL in VPC. https://docs.cloudstack.apache.org/en/l

Allowing all ingress traffic except specific protocols or CIDRs in security groups

2023-11-27 Thread Fariborz Navidan
Hello, As of CS 4.15, in security groups all inbound traffic is blocked by default. As a result to allow all incoming traffic to VMs, we need to add an ingress rule with the protocol specified as "All" and CIDR specified as " 0.0.0.0/0". Is it possible to allow all incoming traffic except specific