Skip to main content

Guide: Manage Inbound and Outbound Rules

Each Security Group has two separate rule tabs: Inbound rule and Outbound rule. This guide describes how to add, edit, and delete rules in both tabs.

Security Group detail page

Before you begin​

  • The Security Group must already exist. If not, see Create a Security Group.
  • You need permission to edit network resources in the corresponding VPC.

Add a new rule​

Step 1 — Open the Security Group detail page​

From the Security Groups list, click the name of the Security Group you want to configure.

The detail page opens with two tabs: Inbound rule and Outbound rule.

Step 2 — Select the appropriate tab​

  • Select the Inbound rule tab to configure traffic flowing into the resource.
  • Select the Outbound rule tab to configure traffic flowing out from the resource.

The current rule list for the selected tab is displayed with the following columns: Type, Protocol, Port range, Action, IP type, Sources, Description, Status.

Step 3 — Add a new rule​

Click Inbound rule or Outbound rule (corresponding to the selected tab) (or the add rule icon in the interface). An input form appears with the following fields:

Security Group add rule form

FieldRequiredDescription
TypeYesThe traffic type, for example: Custom TCP, Custom UDP, All traffic, SSH, HTTP, HTTPS, etc. Select from the dropdown list.
ProtocolYesThe network protocol: TCP, UDP, ICMP, or All. Auto-filled when you select a Type.
Port rangeYes (except ICMP/All)The port or port range the rule applies to, for example: 80, 443, 8080-8090.
ActionYesThe action taken when traffic matches the rule: Allow (permit) or Deny (block).
IP typeYesThe IP protocol version: IPv4 or IPv6.
SourcesYesThe IP address or CIDR range of the source (for Inbound rules) or destination (for Outbound rules), for example: 0.0.0.0/0 (all), 192.168.1.0/24.
DescriptionNoA note describing the purpose of this rule, making it easier to identify.

Step 4 — Save the rule​

After filling in all required information, click Save (or Confirm). The new rule appears in the list with the status Active.

Note: Rules take effect immediately after saving — traffic matching the new rule will be handled according to the selected Action.

Edit an existing rule​

  1. In the Inbound rule or Outbound rule tab, locate the rule you want to edit.
  2. Click the edit icon (pencil) or select Edit from the action menu for that rule.
  3. Update the fields as needed.
  4. Click Save to confirm.

Changes take effect immediately.

Delete a rule​

  1. In the Inbound rule or Outbound rule tab, locate the rule you want to delete.
  2. Click the delete icon (trash can) or select Delete from the action menu for that rule.
  3. Confirm the deletion in the confirmation dialog.

Warning: Deleting a rule takes effect immediately. Traffic that was previously permitted by this rule may be blocked if no other rule matches.

Important notes​

  • A Security Group can contain multiple rules. The system evaluates rules in priority order from top to bottom.
  • If no Outbound rules are configured, outbound traffic may be blocked by default — always ensure at least one appropriate Outbound rule is in place.
  • The CIDR 0.0.0.0/0 allows all IPv4 addresses; use it with caution for sensitive ports such as 22 (SSH) or 3389 (RDP).