Firewalls control which traffic can reach your instances. Rules define direction, protocol, ports, and source or destination ranges.
Keep the default firewall for baseline protection. Create your own firewalls for application roles such as web, database, or internal services, then attach them through network profiles.
Create a firewall
Open Firewalls
go to Compute, Network, then Firewalls in the correct region.
Create firewall
select Create firewall and give it a clear name.
Open the firewall
select the new firewall to manage its rules.
Attach at launch
use the firewall in a network profile, or select it when you provision an instance.
Add and manage rules
Open Rules
on the firewall detail page, open the ingress or egress rules panel.
Add a rule
choose direction, protocol, port or port range, and the allowed source or destination.
Use least privilege
allow only the ports your application needs, such as 22 for SSH or 443 for HTTPS.
Save the rule
confirm the change and verify it appears in the rules list.
Review regularly
remove unused rules so production exposure stays tight.
Important notes
Default firewall
the platform default cannot be deleted. Create custom firewalls for your own rule sets.
Region scope
firewalls and rules apply in the region where you create them.
Test access
after rule changes, confirm SSH, HTTPS, or application connectivity from an expected client.