Configure a VPS Firewall or Security Group

Manage security groups from the Firewall tab on a VPS details page: attach a group and add or remove allow/deny rules by direction, protocol, port, and source. Rules take effect immediately. If the provider has no cloud firewall, configure ufw, iptables, or firewalld inside the server.

Configure a VPS Firewall or Security Group

Open firewall management

  • Sign in to the console, open the VPS details page, and select the Firewall subtab.
  • The top of the page shows the attached security group, including its name and rule count. If no group is attached, select Choose security group, or select New to create a group that is automatically attached to this instance.

Add or delete a rule

  • Select Add rule and complete the fields:
  • Direction: inbound or outbound.
  • Protocol: TCP, UDP, ICMP, or another option provided by the supplier template.
  • Port: for example, 22, 80, 443, or a range such as 8000-9000. ICMP and any do not require a port.
  • Source: for example, 0.0.0.0/0 for all IP addresses, or a specific network range.
  • Action: allow or deny. You can also add a note.
  • The rule takes effect immediately after it is saved. To remove one, select Delete on its row and confirm.

Replace or detach a security group

At the top of the page, select Replace to attach another group or Detach to remove the current one. Multiple instances can share a group; changing a shared rule affects every attached instance.

If the provider does not support security groups

If the page says security groups are not supported, this instance's provider does not offer a cloud firewall. Configure ufw, iptables, or firewalld inside the operating system, or submit a ticket for assistance.