All VPC networks are created with two implied firewall rules which are not visible to developers. The first rule allows all egress requests from all instances, and the second denies all ingress requests to all instances. As a result, all instances may make outbound requests to any target, and no instance will receive any inbound requests, including requests from within the same network or subnet.
Unlike other VPC networks, the default network is created with the following rules:
- default-allow-internal: TCP, UDP, and ICMP on all ports within the network
- default-allow-icmp: External ICMP access
- default-allow-ssh: External SSH access via TCP on port 22
- default-allow-rdp: External RDP access via TCP on port ...
