Help Center/ Elastic IP/ User Guide (Kuala Lumpur Region)/ FAQs/ EIP Binding and Unbinding/ How Do I Access an ECS with an EIP Bound from the Internet?
Updated on 2022-08-08 GMT+08:00
View PDF
Share

How Do I Access an ECS with an EIP Bound from the Internet?

Each ECS is automatically added to a security group after being created to ensure its security. The security group denies access traffic from the Internet by default (except TCP traffic from port 22 through SSH to a Linux ECS and TCP traffic from port 3389 through RDP to a Windows ECS). To allow external access to ECSs in the security group, add an inbound rule to the security group.

You can set Protocol to TCP, UDP, ICMP, or All as required on the page for creating a security group rule.

  • If the ECS needs to be accessible over the Internet and the IP address used to access the ECS over the Internet has been configured on the ECS, or the ECS does not need to be accessible over the Internet, set Source to the IP address range containing the IP address that is allowed to access the ECS over the Internet.
  • If the ECS needs to be accessible over the Internet and the IP address used to access the ECS over the Internet has not been configured on the ECS, it is recommended that you retain the default setting 0.0.0.0/0 for Source, and then set allowed ports to improve network security.
  • Allocate ECSs that have different Internet access policies to different security groups.

    The default source IP address 0.0.0.0/0 indicates that all IP addresses can access ECSs in the security group.