SDN Firewall for Private Networks

SDN Firewall is now available for SDN Private Networks, giving you granular control over traffic entering and leaving your private network interfaces.

Firewall rules are enforced just before each Cloud Server, filtering traffic on its SDN network interfaces. You can group rules into reusable firewall rulesets and apply the same ruleset to multiple servers — making it straightforward to enforce consistent policies across a group of servers without duplicating configuration.

Key capabilities include:

• Inbound and outbound rules: Control traffic flowing into and out of each server's SDN interface independently, giving you precise security boundaries per server.
• Stateful filtering: Return traffic for established connections is automatically permitted, so you only need to define rules for the direction you want to control.
• Protocol and port matching: Write rules that match TCP, UDP, or ICMP traffic and scope them to specific port ranges for fine-grained access control.
• Shared rulesets: Define a ruleset once and attach it to any number of Cloud Servers, keeping security policies consistent and easy to update across your infrastructure.
• Default deny posture: You can configure to deny all traffic by default and explicitly allow only the connections your workloads require.

See the Firewall documentation for full details.