New security groups can be created on need in order to allow or block certain incoming or outgoing connections.
Filtering rules can be configured within a new security group defining the traffic from/to certain IP address or IP ranges.
Pre-requisite
- Access to an active cloud project
- Access to the Horizon portal
Content
Create the Security Group
Access the Security Group tab in Horizon
Access the OpenStack Horizon portal an go on the left-menu on the tab "Network→Security Groups" :
Create the new Security Group
Click on the button:
and insert a Name and Description:
Then press "Create Security Group".
Manage the traffic rules of the security group
Access the Security Group rules
Once the security group has been created then from the security group page it is possible to add new ingress/egress traffic rules.
Go to the selected Security Group and click on the "Manage Rules" button:
which allows to access the Security Group rules configuration page:
From this page it is possible to review the existing rules, adding new ones or the delete them.
Add a new rule to the Security Group
On the Security Group rules configuration page click on the top-right button "+ Add Rule"
which opens the following window where it is possible to configure the desired network traffic for the the selected source and destination :
Once the desired traffic rule has been configured, then click the "Add" button.
Applying a Security Group to an instance
Apply the Security Group during a new instance creation
During the creation of a new instance it is possible to apply one or more desired security groups from the dedicated panel :
The top/down "arrows" on the right-side of each security group can be used to add or remove the security group.
Apply the Security Group to an existing instance
In order to apply a security group to an existing instance either is possible to go on the Instances page and among the "Actions" menu for the selected instance click on the option "Edit Security Groups" :
which will open the following window from which it is possible to add the desired security groups to the instance with the "+" button :
Once configured the desired security groups then click "Save" to apply the changes.







