Overview

Service Overview

A Security Group is a virtual logical firewall that controls inbound/outbound traffic generated on virtual servers in Samsung Cloud Platform. The resources that can have a Security Group applied include Virtual Server, Database, Kubernetes Engine, etc. A Security Group is applied to the ports of the target resource, and multiple Security Groups can be applied depending on each resource’s characteristics.

When you first create a Security Group, it blocks all inbound and outbound traffic according to the default rule (Any/Deny).

Users can specify an IP address, port, and protocol to create inbound/outbound rules, and only traffic allowed by the created rules can access the target resources.

Component

The components that make up a Security Group are as follows.

Component	Detailed description
Applicable target	Resources to which the Security Group is applied Apply the Security Group to Virtual Server, Database, Kubernetes Engine, and Load Balancer The Security Group is applied to the ports of the target resources, and multiple Security Groups can be applied depending on each resource’s characteristics.
Security Group Rules	When a Security Group is first created, it blocks all inbound and outbound traffic according to the default rule (Any/Deny) Ping and SSH communication between servers in the same subnet are also blocked, and it can be used after the user configures the necessary rules Add inbound/outbound allow rules by specifying target address, protocol, and port Blocking rules cannot be set Provides a bulk rule creation feature through form creation

Component

Detailed description

Applicable target

Resources to which the Security Group is applied

Apply the Security Group to Virtual Server, Database, Kubernetes Engine, and Load Balancer

The Security Group is applied to the ports of the target resources, and multiple Security Groups can be applied depending on each resource’s characteristics.

Security Group Rules

When a Security Group is first created, it blocks all inbound and outbound traffic according to the default rule (Any/Deny)

Ping and SSH communication between servers in the same subnet are also blocked, and it can be used after the user configures the necessary rules

Add inbound/outbound allow rules by specifying target address, protocol, and port

Blocking rules cannot be set

Provides a bulk rule creation feature through form creation

Table. Security Group components

Constraints

The Security Groups of Samsung Cloud Platform have default quotas (limits) set. There is a maximum number of Security Groups that can be created and a maximum number of Security Group rules. The Samsung Cloud Platform Console is a place where you can view and manage quotas for Samsung Cloud Platform services and request quota increases for many resources.

Category	Default quota	Detailed description
Security Group	100 items	Number of default Security Groups that can be created per account
Number of Security Group rules	100 items	Maximum number of default rules that can be created per Security Group
Security Group rule count > project	1,000 items	Maximum number of default Security Group rules that can be created per account

Table. Security Group Constraints

Preceding Service

Security Group has no preceding service.