Managing security groups in LS Cloud. A security group is a set of network access rules that control incoming and outgoing traffic to virtual machines assigned to this group. With security group rules, you can specify the type and direction of traffic allowed access to a virtual interface port. Traffic that does not satisfy any rule is dropped.
The default security group is automatically created in the compute cluster for each project. This group allows all traffic on all ports for all protocols and cannot be deleted. When you attach a network interface to a VM, the interface is associated with the default security group unless you explicitly select a custom security group.
You can assign one or more security groups to both new and existing virtual machines. When you add rules to security groups or remove them, the changes are enforced at runtime.
Limitations
- You can manage only IPv4 security group rules.
In this section
- Creating and deleting security groups
- Managing security group rules
- Changing security group assignment
