July 2018
Intermediate to advanced
506 pages
16h 2m
English
Every firewall rule has a priority from 0 to 65,535, which determines the order in which rules are applied. The highest priority is 0 while the lowest priority is 65,535, and higher priority rules override lower priority rules. This makes it possible to apply broad firewall rules with a low priority, and to create exceptions with more specific, higher priority rules. For example, consider the following two rules:
|
Name
|
Direction
|
Priority
|
Action
|
Protocol
|
Source
|
|
block-tcp
|
ingress
|
1000
|
DENY
|
TCP
|
IP: 0.0.0.0/0
|
|
allow-tcp
|
ingress
|
500
|
ALLOW
|
TCP
|
tag: web-server
|
The block-tcp rule denies all inbound TCP requests, but the allow-tcp rule allows TCP requests to instances with the tag web-server