Host Security

It is recommended that you perform security hardening on ECSs that communicate with the public network by referring to HUAWEI CLOUD Brute Force Attack Prevention for Cloud Hosts. Host security protection includes operating system (OS) security hardening and the use of host security products, such as host-based intrusion detection system (HIDS) and antivirus (AV).
To ensure the running reliability of key ECSs, you can add key similar nodes (when creating ECSs) to an ECS group and allocate ECSs in an ECS group to different physical servers using anti-affinity policies. For example, you can add backend ECSs monitored by ELB listeners to an ECS group and add SAP DB ECSs to an ECS group.

Parent topic: Production Environment Security Solution