Firewall usage

Create a firewall approval for your institute.[wiki_firewall_1]

Freiburg

Create a security group freiburg, allowing only ingress to your service, under port 8080, from the University Freiburg, and assign it to your VM myVM.

openstack security group create freiburg
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '132.230.0.0/16' \
    freiburg
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip '192.52.50.0/24' \
    freiburg
openstack server add security group myVM freiburg

Custom workplace

Create a security group myWorkplace, allowing only ingress to your service, under port 8080, from your current workplace, and assign it to your VM myVM.

1. Login into myVM via SSH.
2. Get your login IP-Address myIP via cat /var/log/secure | grep Accepted.
3. Allow ingress from your current workplace.

openstack security group create myWorkplace
openstack security group rule create \
    --ingress \
    --dst-port 8080 \
    --protocol tcp \
    --remote-ip myIP \
    myWorkplace
openstack server add security group myVM myWorkplace

⇈ Hoch