Removing Instances from One or More Security Groups

Scenarios

You can associate an ECS with a security group by associating its network interface with that security group. After the association is successful, the security group controls the inbound and outbound traffic of the ECS. You can change the association between the ECS network interface and the security group as needed. For details about how multiple security groups take effect, see How Security Groups Work.

To remove ECS network interfaces from one or more security groups, perform the operations described in this section.

Constraints

• Using multiple security groups may deteriorate ECS network performance. You are advised to select no more than five security groups.
• Only the primary network interfaces of an ECS can be batch removed from a security group.
• An instance must be added to at least one security group. If you want to change the security group for an instance, you can add the instance to a new security group and then remove the instance from the original security group.

Removing an Individual ECS from One or More Security Groups

1. Log in to the management console.
2. Click . Under Compute, click Elastic Cloud Server.
3. In the ECS list, choose More > Manage Network > Remove from Security Group in the Operation column.

   The Remove from Security Group dialog box is displayed.

4. Select the network interfaces and security groups.

   You can select multiple security groups where the ECS belongs to.

5. Click OK.

Removing Multiple ECSs from One or More Security Groups

1. Log in to the management console.
2. Click . Under Compute, click Elastic Cloud Server.
3. Select the ECSs you want to remove from security groups.
4. Choose More > Manage Security Group > Remove from Security Group above the ECS list.

   The Remove from Security Group panel slides out from the right.

   Figure 1 Removing ECSs from security groups
   
5. Select one or more security groups from which you want to remove ECSs.

   You can select multiple security groups where the ECSs belong to.

6. Click OK.

Viewing Security Groups Associated with an ECS

1. Log in to the ECS console.
2. Click the target ECS name to go to the details page.
3. Click the Security Groups tab.
4. Select a network interface from the drop-down list. All security groups and security group rules associated with that network interface are displayed.