Security Groups

A security group is a firewall you attach to your TIR resources. Its inbound rules say which traffic can reach a resource, and its outbound rules say where the resource can send traffic. Attach the same group to every instance, VM, inference service, or Slurm cluster that needs the same access, and change the rules in one place.

Every project starts with Default-SSH-Security-Group, which lets SSH in from any network and lets all traffic out. It is enough to start with. Create your own groups when you want SSH from your own address only, or need to open the port of a web app or an API.

Security Groups sits under Networking in the side menu, beside two related screens. Reserve IP keeps an IP address for you, and VPC gives your VMs a private network.

Where to find it

In TIR, open your project. In the side menu, under PLATFORM SERVICES, select Networking, then Security Groups.

What you can do

• Create a security group with its inbound and outbound rules.
• Attach or detach a security group on an instance, an inference service, or a Slurm cluster. For a VM, see Attach security groups to a VM.
• Manage security group rules to open or close ports as your needs change.
• Edit a security group to change its name or description.
• Delete a security group you have finished with.

Security groups and rules explains how rules work, with rule sets for common setups.

Where to start

Get started with Security Groups creates a group and attaches it to a resource. The Security Groups FAQ has short answers, and Troubleshooting Security Groups explains each message TIR can show.