Skip to content

Commit 05df663

Browse files
committed
update ingress and egress rules
1 parent 8f00a9a commit 05df663

File tree

2 files changed

+49
-2
lines changed

2 files changed

+49
-2
lines changed

ocne2/templates/egress_security_rules.j2

Lines changed: 21 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,4 +6,24 @@
66

77
instance_egress_security_rules:
88
- destination: "0.0.0.0/0"
9-
protocol: 6
9+
protocol: 6
10+
{% if use_fss %}
11+
- destination: "10.0.0.0/24"
12+
protocol: 6
13+
tcp_options:
14+
source_port_range:
15+
max: 111
16+
min: 111
17+
- destination: "10.0.0.0/24"
18+
protocol: 6
19+
tcp_options:
20+
source_port_range:
21+
max: 2050
22+
min: 2048
23+
- destination: "10.0.0.0/24"
24+
protocol: 17
25+
udp_options:
26+
destination_port_range:
27+
max: 111
28+
min: 111
29+
{% endif %}

ocne2/templates/ingress_security_rules.j2

Lines changed: 28 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,4 +25,31 @@ instance_ingress_security_rules:
2525
destination_port_range:
2626
max: 443
2727
min: 443
28-
{% endif %}
28+
{% endif %}
29+
{% if use_fss %}
30+
- source: "10.0.0.0/24"
31+
protocol: 6
32+
tcp_options:
33+
destination_port_range:
34+
max: 111
35+
min: 111
36+
- source: "10.0.0.0/24"
37+
protocol: 6
38+
tcp_options:
39+
destination_port_range:
40+
max: 2050
41+
min: 2048
42+
- source: "10.0.0.0/24"
43+
protocol: 17
44+
udp_options:
45+
destination_port_range:
46+
max: 111
47+
min: 111
48+
- source: "10.0.0.0/24"
49+
protocol: 17
50+
udp_options:
51+
destination_port_range:
52+
max: 2048
53+
min: 2048
54+
{% endif %}
55+

0 commit comments

Comments
 (0)