tencent cloud

All product documents
Cloud Virtual Machine
DocumentationCloud Virtual MachineFAQsSecuritySecurity Group Rules
Security Group Rules
Download PDF
Last updated: 2024-01-06 17:26:45
Security Group Rules
Last updated: 2024-01-06 17:26:45
Download PDF

In what scenarios do I need to add security group rules?

To ensure the accessibility of CVM instances, you need to add security group rules in the following scenarios:
There is no security group rule (added or default) for CVM instances. If your CVM instances need to access the public network or communicate with CVM instances associated to other security groups in the same region, you need to add security rules.
The application you built uses a custom port or port range, instead of the default port. In this case, you need to open the custom port or port range before testing the application connectivity. For example, if you set up an Nginx service on your CVM instances that listens on the TCP 1800 communication port but your security group only opens port 80, you need to add security group rules to ensure the accessibility of the Nginx service.
For other scenarios, see Security Group Use Cases.

What impact will incorrectly configuring security group rules have?

If any security group rule is configured incorrectly, CVM instances will fail to access other devices over the private network or public network. For example:
You may fail to remotely connect to a Linux instance over SSH or a Windows instance via remote desktop.
You may fail to remotely ping the public IP of a CVM instance.
You may fail to access Web services provided by CVM instances over the HTTP or HTTPS protocol.
You may fail to access other CVM instances over the private network.

Are the inbound rules and outbound rules of a security group counted separately?

A maximum of 100 inbound and 100 outbound rules can be set for a security group.

Can I adjust the maximum number of security group rules allowed?

Each security group can configure up to 200 security group rules, including 100 inbound rules and 100 outbound rules. One CVM instance can be associated with up to 5 security groups and can therefore adopt up to 1,000 security group rules, which is enough to meet the needs of most scenarios. If your usage surpasses this upper limit, check whether redundant rules exist.
If so, remove them.
If not, create more security groups.
In addition, you can submit a ticket to raise the upper limit of security group rules.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Contact Us
Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 available.

Submit a Ticket
7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon