Help Center> Host Security Service (New)> User Guide> Prevention> Container Firewalls> Creating a Policy (for a Cluster Using the VPC Network Model)
Updated on 2024-01-16 GMT+08:00

Creating a Policy (for a Cluster Using the VPC Network Model)

For clusters using the VPC network model, you can configure security group rules to limit the traffic that accesses the servers where containers are deployed. If no security group rules are configured, all incoming and outgoing traffic of the servers is allowed by default.

Procedure

  1. Log in to the management console.
  2. In the upper left corner of the page, select a region, click , and choose Security & Compliance > HSS.
  1. In the navigation pane, choose Prevention > Container Firewalls.
  2. Click Manage Policy in the Operation column of a cluster using the VPC network model.
  3. In the Operation column of a node, click Configure Policy.
  4. In the displayed dialog box, click OK to go to the cloud server console.
  5. Click the Security Groups tab and view security group rules.
  6. Click Manage Rule. The security group page is displayed.
  7. Configure inbound and outbound rules.

    For details, see Adding a Security Group Rule.