E2E CloudSecurity Group FAQ
What is a security group?
Section titled “What is a security group?”A virtual firewall you attach to a node or another resource. Its rules decide which traffic can reach the resource and which can leave it, by protocol, port, and source address. See Security Group.
Does every node have a security group?
Section titled “Does every node have a security group?”Yes. Each account has a default group per project and region, and a new node gets it unless you pick another group while creating the node. See Set a security group as default.
What does the default security group allow?
Section titled “What does the default security group allow?”The default that E2E creates allows all traffic in and out. If you made one of your own groups the default, it allows what your rules say. To see a group’s rules, select it and open its Inbound Rules and Outbound Rules tabs. To replace the default on a node, see Get started with Security Group.
Can a node have more than one security group?
Section titled “Can a node have more than one security group?”Yes, and their rules add up: traffic gets through when any group on the node allows it. See Attach a security group to a node.
Do I need both an inbound and an outbound rule?
Section titled “Do I need both an inbound and an outbound rule?”Yes. A group needs at least one of each. An outbound rule of ALL to Any Network lets the node reach the internet freely. See Create a security group.
Can I allow traffic only from my IP?
Section titled “Can I allow traffic only from my IP?”Yes. In an inbound rule, choose My IP / Whitelist IP as the source, and then detach any other group on the node that allows the same port from anywhere. See Get started with Security Group.
Can I delete the default security group?
Section titled “Can I delete the default security group?”No. Set another group as default first, and then the old one can be deleted. See Delete a security group.
Can I delete a security group that a node is using?
Section titled “Can I delete a security group that a node is using?”No. Detach it from every resource first. See Delete a security group.
Which regions have security groups?
Section titled “Which regions have security groups?”Delhi and Chennai. A group belongs to one project and one region.
Is a security group the same as the Firewall product?
Section titled “Is a security group the same as the Firewall product?”No. The Firewall product is a FortiGate appliance. A security group is attached to each resource it protects.
Do security group rules replace the firewall inside the node?
Section titled “Do security group rules replace the firewall inside the node?”No. A firewall inside the node, such as ufw or Windows Firewall, filters traffic as well, so a port must be open in both. E2E recommends managing access with security groups alone. See Add or edit rules.