Hủy
Cloud Insights

All documents

Metal Cloud

FPT Cloud Server
FPT Container
FPT Network
FPT Storage
FPT Cloud Backup & DR
FPT Database Engine
FPT Integration
FPT DevSecOps Services
FPT Monitoring
FPT Security
AI Infrastructure
AI Inference
FPT AI Inference
AI Studio
AI Marketplace
Billing
    Network ACL
    Network ACL
    Updated on 16 May 2025
    Print: Export: PDF

    About Network ACL

    Network ACL (NACL) is a crucial part of network security. It helps control and manage traffic flow in and out of subnets by applying rules that either allow or deny access.

    • A network ACL is automatically created with a subnet that supports IPv4 only.
    • Each subnet must be associated with a NACL.
    • Each NACL has a maximum limit of 100 rules (both inbound & outbound rules).

    Network ACL rules

    • You can modify the default NACL by adding or removing rules. Any changes made to the rules of a network ACL are automatically applied to the associated subnets.
    • Components of a Network ACL Rule:

    1. Priority
      Rules are processed in ascending order by by priority number. Once a rule matches the traffic, it is applied, even if higher-numbered priority of rules conflict with it. The system automatically increments the priority number, but the user can change it as long as it does not duplicate an existing number.

    2. Type
      Specifies the type of traffic, such as HTTP, HTTPS, or ALL.

    3. Protocol
      NACL supports TCP, UDP, ICMP, or any protocols.

    4. Port
      The specific port of the traffic is targeted from 1 to 65535.

    5. Source
      For inbound rules, this specifies the origin of the traffic (CIDR range).

    6. Destination
      For outbound rules, this specifies the target of the traffic (CIDR range).

    7. Traffic Action
      The specified traffic is permitted with Allow or Deny.

    Notices

    • The default rule is automatically created with a NACL that allows all outbound traffic, and you can delete it.
    Priority Type Protocol Port Destination Traffic Action
    100 ALL ALL ALL 0.0.0.0/0 ALLOW
    • If you delete the above default rule, you need to add the following outbound rules to create and deploy the server:
    Priority Type Protocol Port Source Traffic Action
    1 HTTP TCP 80 0.0.0.0/0 ALLOW
    2 HTTPS TCP 443 0.0.0.0/0 ALLOW
    3 DNS (UDP) UDP 53 0.0.0.0/0 ALLOW

    What you can do with a Network ACL

    Create New Rules

    Creating an additional Network ACL allows (ALLOW) or denies (DENY) all or specific types of inbound and outbound traffic.

    1. Sign in to your FPT Cloud account, select a Tenant, a Region, and a VPC (if you have more than one).
    2. Navigate to AI Infrastructure > Network ACL in the sidebar.
    3. Choose a network ACL by clicking a NACL name or Actions > Manage rules in the list.
    4. Choose an Outbound or Inbound Tab (if you want to create the corresponding traffic rule).
    5. Click the Create new rule button.
    6. Enter the following details:
      • Priority
      • Type
      • Protocol
      • Port
      • Source/Destination
      • Traffic Action
    7. You can create multiple new rules. Once done, choose Apply to save the changes.

    Modify Existing Rules

    To modify one or more Network ACL rules, follow these steps:

    1. Choose a network ACL by clicking a NACL name or Actions > Manage rules in the list.
    2. Click on the Edit icon in the rule you want to modify.
    3. Change the rule value to your desired configuration.
    4. You can repeat and modify multiple existing rules. Once done, choose Apply to save the changes.

    Remove Rules

    To remove one or more Network ACL rules, follow these steps:

    1. Choose a network ACL by clicking a NACL name or Actions > Manage rules in the list.
    2. Click on the Delete icon in the rule you want to remove.
    3. You can repeat and delete multiple existing rules. Once done, choose Apply to save the changes.
    © 2025 FPT Cloud. All Rights Reserved.