Attaching a security group to a node puts its rules to work there. A node can carry several groups, and their rules add up: traffic gets through when any one of them allows it.
Before you begin
Section titled “Before you begin”- A node in your account. See Create a node.
- The security group to attach. See Create a security group.
Attach the group
Section titled “Attach the group”- Open Compute > Nodes, select the node, and open its Security Group tab.
- Click Attach Security Group.
- Type part of the group’s name, pick the group, and pick more if you want to attach several at once.
- Click the check mark.
The group joins the list on the node’s Security Group tab, and its rules now apply to the node. Expand a group in the list to see its inbound and outbound rules, or click the edit icon beside it to change them. If the picker has no group left to offer, the tab says No more Security Groups are available. and links to creating one.
Make the new group the one that decides
Section titled “Make the new group the one that decides”If you attached the group to be stricter, such as SSH from your office only, check the other groups on the node. The default group allows all traffic from anywhere, so while it stays attached, a rule that limits SSH to your office makes no difference. Once your group is attached, detach the default group from the node.
The node now follows the rules of every group on its list. To change what a group allows, see Add or edit rules. A group that will not attach is covered in Troubleshooting Security Group.