Step 1: Create Security Policy
Last updated
Last updated
Navigate to Security Policies service
Once you land in this service, you'll see a few auto-generated policies:
Incoming default
By default ClusterWare denies all incoming traffic to your servers unless you explicitly add items to an allowlist.
Outgoing default
By default ClusterWare allows all outgoing traffic initiated from your servers.
Allow SSH from ClusterWare
Allows ClusterWare systems to manage your servers via SSH (on port 22). If your servers run SSH service on a different port, please add a new policy allowlisting provided IP addresses on your custom port.
Allow from Internet to Load Balancer
This policy is auto-generated for each Load Balancer in your cluster. It allows all incoming traffic to load balancer server on the port number you specified in its settings.
Allow from Load Balancer to Applications
This policy is auto-generate for each Load Balancer in your cluster. It allows the traffic coming from the Load Balancer to reach all your servers in this cluster.
Click Add new Security Policy
Leave the list of Servers to apply this policy as default (include all serves)
Click Save policy
Your new policy card will show up on the list.
Fill out the form with your new policy details: Name, Allow list () and Port 22
.