We are pleased to announce that the Security Groups feature will be available on the MyAccount cloud platform from 05-06-2023.
Security groups will provide security to cloud node resources. They will help to control inbound and outbound traffic and allow users to specify who can access resources.
The Security Groups will contain a set of rules that indicate the source IP addresses, port numbers, and protocols to be allowed in order to access a resource. They can control access to and from MyAccount cloud nodes, restrict traffic from certain IP addresses, and even limit access to certain applications or services within the MyAccount cloud. Security Groups are a crucial tool for protecting the security of your MyAccount cloud setups and resources.
You can check our documentation for the usage and management of Security Groups at https://docs.e2enetworks.com/networking/security_groups.html
As of now OS based firewall utility services like iptables, ufw, firewall in linux, and Windows Firewall in Windows nodes are used by the users to control inbound and outbound traffic.
However, with the Security Groups feature in place, the tedious process of configuring and managing these OS-based firewall services will no longer be needed.
You can secure your nodes along with services and applications running on them more easily and effectively with the Security Groups.
The OS-based firewall utility services might already be running on all your existing nodes and their rules might conflict with the Security Group rules which may cause an adverse effect. We recommend stopping such firewall utility services on your nodes and using only Security Groups to avoid any undesirable effects.
However, the default Security Group attached to all your nodes is configured with rules to allow all inbound and outbound traffic for all protocols like TCP, UDP, ICMP etc, you can modify the rules or detach the default Security Group and attach a new one created with a custom set of rules as per your requirements at any point of time.
Note: Our monitoring service uses TCP port 10050 and CDP Backups services use TCP port 1167. Please make sure that Inbound rules to allow these 2 ports are added in your custom-created Security Groups to ensure the uninterrupted working of monitoring and CDP Backups of your nodes.
If you have any queries regarding this, you may write an email to cloud-platform@e2enetworks.com and we will be happy to discuss and answer your queries.