To create a security group

1. Open the Nobus Console

2. In the navigation pane, goto Project > Network >Security Groups

3. Choose Create security group.

4. In the details section, do the following.

   1. Enter a name and brief description for the security group.

   2. For Datacenter, choose the Datacenter in which to create the security group. The security group can only be used in the Datacenter in which it is created.

5. You can add security group rules now, or later, after creation. For more information about adding security group rules, see Adding rules to a security group.

6. Click Create.

To copy a security group

1. Open the Nobus Console

2. In the navigation pane, goto Project > Network >Security Groups

3. Select the security group to copy and choose Actions, Copy to new security group.

4. Specify a name and optional description, and change the Datacenter and security group rules if needed.

5. Choose Create.

To view your security groups

1. Open the Nobus Console

2. In the navigation pane, goto Project > Network >Security Groups

3. Your security groups are listed. To view the details for a specific security group, including its inbound and outbound rules, choose its ID in the Security group ID column.

To add an inbound rule to a security group

1. Open the Nobus Console

2. In the navigation pane, goto Project > Network >Security Groups

3. In the list, select the security group and choose Actions, Edit inbound rules.

4. Choose Add rule and do the following.

   1. For Type, choose the type of protocol to allow.

      • If you choose a custom TCP or UDP protocol, you must manually enter the port range to allow.

      • If you choose a custom ICMP protocol, you must choose the ICMP type name from Protocol, and, if applicable, the code name from Port range.

      • If you choose any other type, the protocol and port range are configured automatically.

   2. For Source, do one of the following.

      • Choose Custom and then enter an IP address in CIDR notation, a CIDR block, or another security group from which to allow inbound traffic.

      • Choose Anywhere to allow all inbound traffic of the specified protocol to reach your instance. This option automatically adds the 0.0.0.0/0 IPv4 CIDR block as an allowed source. This is acceptable for a short time in a test environment, but it's unsafe for production environments. In production, authorize only a specific IP address or range of addresses to access your instance.

        If your security group is in a Datacenter that's enabled for IPv6, this option automatically adds a second rule for IPv6 traffic (::/0).

      • Choose My IP to allow inbound traffic from only your local computer's public IPv4 address.

   3. For Description, optionally specify a brief description for the rule.

5. Choose Preview changes, Save rules.

To add an outbound rule to a security group

1. Open the Nobus Console

2. In the navigation pane, goto Project > Network >Security Groups

3. In the list, select the security group and choose Actions, Edit outbound rules.

4. Choose Add rule and do the following.

   1. For Type, choose the type of protocol to allow.

      • If you choose a custom TCP or UDP protocol, you must manually enter the port range to allow.

      • If you choose a custom ICMP protocol, you must choose the ICMP type name from Protocol, and, if applicable, the code name from Port range.

      • If you choose any other type, the protocol and port range are configured automatically.

   2. For Destination, do one of the following.

      • Choose Custom and then enter an IP address in CIDR notation, a CIDR block, or another security group for which to allow outbound traffic.

      • Choose Anywhere to allow outbound traffic to all IP addresses. This option automatically adds the 0.0.0.0/0 IPv4 CIDR block as an allowed source.

        If your security group is in a Datacenter that's enabled for IPv6, this option automatically adds a second rule for IPv6 traffic (::/0).

      • Choose My IP to allow outbound traffic only to your local computer's public IPv4 address.

   3. For Description, optionally specify a brief description for the rule.

5. Choose Preview changes, Confirm.

To update a security group rule

1. Open the Nobus Console

2. In the navigation pane, goto Project > Network >Security Groups

3. Select the security group to update, choose Actions, and then choose Edit inbound rules to update a rule for inbound traffic or Edit outbound rules to update a rule for outbound traffic.

4. Update the rule as required and then choose Preview changes, Confirm.

To delete a security group rule

1. Open the Nobus Console

2. In the navigation pane, goto Project > Network >Security Groups

3. Select the security group to update, choose Actions, and then choose Edit inbound rules to remove an inbound rule or Edit outbound rules to remove an outbound rule.

4. Choose the remove button to the right of the rule to delete.

5. Choose Preview changes, Confirm.

To delete a security group

1. Open the Nobus Console

2. In the navigation pane, goto Project > Network >Security Groups

3. Select the security group to delete and choose Actions, Delete security group, Delete.