Firewall

In this section you can easily manage your firewall rules from the cloud platform.

By default, we do not add any rules to newly provisioned VPSs. However the firewall does come enabled out of the box. This is important to understand as you will not be able to access the VPS remotely before altering the firewall rules. We provision these machines locked-down from the start with the default rules blocking everything inbound and allowing everything outbound. Blacklisted ports are listed under Restricted Ports.

Default firewall configuration for newly provisioned VPS service. This allows everything out and drops everything coming in.

If for example you would like to enable remote SSH access (which you should), you would have to add a rule allowing you to do so.

Users have the ability to disable the firewall or adjust the inbound firewall policy to quickly obtain remote access, however we strongly recommend you practice good security hygiene and only allow in what you need.

Configuring Firewall Rules

You can customize your rules by selecting the "Add new rule" button.

We already have some preloaded firewall rule macros. If you don't see the macro you need, then you can manually set the rule yourself.

Examples

• Scenario 1: Use a macro to allow SSH connections from my home IP address (i.e. 123.123.123.123).

• Scenario 2: Make a custom firewall rule to allow web traffic on port 3000.

Scenario 1

This configuration will only allow users from 123.123.123.123 to access the SSH service on port 22.

Scenario 2

This configuration allows any IP to access port 3000 over TCP connections on your machine.

In almost every scenario you encounter, you will likely not ever need to supply a source port. So leave that blank unless you know exactly what you are doing.

There are a lot of protocol options in the dropdown. You should only ever be using the first three: TCP, UDP, or ICMP. If you need to open up a the firewall over UDP and TCP then you will have to make two separate rules for each protocol.