Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This document describes about the Egress firewall rules for the VR. The Egress traffic originates from the VMs and sent to public domain.

By default all Egress /Outbound traffic is allowed. We can have Egress firewall rules to block specified traffic.

...

  1. Block the traffic  originating from a particular VM
  2. Block the traffic originating from the particular Source IP (VM IP) or CIDR
  3. Block the protocol TCP/UDP/ICMP. Port range both Source and Destination port range
  4. Block the traffic  to specific Destination IP or CIDR

Parameters:

Egress firewall rule can have the following parameters:

  1. VM id (Optional)                                                                                                  - Id of the VM to which Egress rule is configured
  2. Protocol (Optional)                                                                                          - Protocol TCP/UDP
  3. Source IP or CIDR (Optional)                                                          - CIDR of Guest Network
  4. Source port  port range start (Optional)                       - Source port start
  5. Source port range end (Optional)                        - Source port end
  6. Destination IP or CIDR (Optional)                       - Destination/Public IP CIDR
  7. Destination port start (Optional)                          - Destination port range start
  8. Destination port end (Optional)                           - Destination port range end
  9. ICMP code (Optional)                                          - ICMP code
  10. ICMP Type (Optional)                                          - ICMP Type
  11. Traffic Type                                                          - Specifies traffic type ( 'egress' for egress rules)

...