View Source

New security groups can be created on need in order to allow or block certain incoming or outgoing connections.

Filtering rules can be configured within a new security group defining the traffic from/to certain IP address or IP ranges.

Pre-requisite

Access to an active cloud project
Access to the Horizon portal

Content

Create the Security Group

Access the Security Group tab in Horizon

Access the OpenStack Horizon portal an go on the left-menu on the tab "Network→Security Groups" :

European Weather Cloud Knowledge Base > EWC Cloud Management UI - Network - Creating a new Security Group in Horizon > image-2026-4-14_14-36-55.png

Create the new Security Group

Click on the button:

and insert a Name and Description:

European Weather Cloud Knowledge Base > EWC Cloud Management UI - Network - Creating a new Security Group in Horizon > image-2026-4-14_14-39-57.png

Then press "Create Security Group".

Manage the traffic rules of the security group

Access the Security Group rules

Once the security group has been created then from the security group page it is possible to add new ingress/egress traffic rules.

Go to the selected Security Group and click on the "Manage Rules" button:

European Weather Cloud Knowledge Base > EWC Cloud Management UI - Network - Creating a new Security Group in Horizon > image-2026-4-14_14-46-14.png

which allows to access the Security Group rules configuration page:

European Weather Cloud Knowledge Base > EWC Cloud Management UI - Network - Creating a new Security Group in Horizon > image-2026-4-14_14-42-35.png

From this page it is possible to review the existing rules, adding new ones or the delete them.

Add a new rule to the Security Group

On the Security Group rules configuration page click on the top-right button "+ Add Rule"

which opens the following window where it is possible to configure the desired network traffic for the the selected source and destination :

European Weather Cloud Knowledge Base > EWC Cloud Management UI - Network - Creating a new Security Group in Horizon > image-2026-4-17_10-12-45.png

Once the desired traffic rule has been configured, then click the "Add" button.

Applying a Security Group to an instance

Apply the Security Group during a new instance creation

During the creation of a new instance it is possible to apply one or more desired security groups from the dedicated panel :

European Weather Cloud Knowledge Base > EWC Cloud Management UI - Network - Creating a new Security Group in Horizon > image-2026-4-17_10-20-6.png

The top/down "arrows" on the right-side of each security group can be used to add or remove the security group.

Apply the Security Group to an existing instance

In order to apply a security group to an existing instance either is possible to go on the Instances page and among the "Actions" menu for the selected instance click on the option "Edit Security Groups" :

European Weather Cloud Knowledge Base > EWC Cloud Management UI - Network - Creating a new Security Group in Horizon > image-2026-4-17_10-25-50.png

which will open the following window from which it is possible to add the desired security groups to the instance with the "+" button :

European Weather Cloud Knowledge Base > EWC Cloud Management UI - Network - Creating a new Security Group in Horizon > image-2026-4-17_10-29-6.png

Once configured the desired security groups then click "Save" to apply the changes.