Bamboozle Cloud Engine

Firewalls

The Cloud Engine Firewall filters network traffic through groups. IPv4 and IPv6 network rules enable traffic filtering for incoming network requests.

How Bamboozle cloud firewalls filter trafficInbound requests on HTTPS port 443, SSH port 22 and RDP port 3389 reach the firewall. Only HTTPS is allowed through to the VM in its security group; the others are blocked. HTTPS :443 SSH :22 RDP :3389 Firewall Web VM Security group Rules per port · protocol · CIDR Inbound & outbound, applied live

Key Capabilities

What It Does

Built into Bamboozle Cloud Engine — available in all three regions, managed from Cloud Control.

  • Stateful Firewall Rules

    Security groups are stateful — return traffic for allowed connections is automatically permitted. Define inbound and outbound rules by protocol (TCP, UDP, ICMP), port range, and source/destination CIDR.

  • Per-Port, Per-Protocol Control

    Create rules as granular as a single port on a single protocol, or as broad as all traffic from a CIDR range. Rules are applied to virtual network interface ports, not to VMs directly — giving per-NIC precision.

  • Live Rule Enforcement

    Rules take effect immediately when added or removed — no reboot, no service restart, no downtime. Changes are enforced across all VMs assigned to the security group in real time.

  • Multiple Groups per VM

    Assign multiple security groups to a single VM network interface. Rules from all assigned groups are combined — giving you composable firewall policies for different traffic tiers.

  • Default Deny Inbound

    New security groups deny all inbound traffic and allow all outbound traffic by default. The default group (created per project) allows all traffic on all ports — use custom groups for production workloads.

  • Spoofing Protection

    Spoofing protection is enabled by default, blocking outgoing traffic with MAC or IP addresses that differ from the configured interface values. Disable only when running overlay networks that require address rewriting.

Rule Types

What You Can Control

Granular inbound and outbound rules — per port, per protocol, per CIDR — applied in real time.

  • TCP inbound / outbound rules
  • UDP inbound / outbound rules
  • ICMP (ping) rules
  • Any protocol rules
  • Single port rules (e.g. port 443)
  • Port range rules (e.g. 8000–9000)
  • CIDR-based source / destination filtering
  • Specific IP address rules
  • Multiple groups per VM interface
  • Per-project default security group
  • Real-time rule enforcement
  • Spoofing protection

Getting Started

How It Works

All networking features are self-service — available in Cloud Control in minutes.

  1. Create Security Group

    In Cloud Control, create a named security group for your project. New groups deny all inbound and allow all outbound by default.

  2. Add Rules

    Define inbound and outbound rules — specify direction, protocol (TCP/UDP/ICMP/Any), port or range, and the source or destination CIDR or IP address.

  3. Assign to VMs

    Assign the security group to a VM network interface when creating or editing a VM. Multiple groups can be assigned to the same interface — rules are merged.

  4. Rules Apply Live

    Rules are enforced immediately. Add or remove rules at any time without restarting VMs. Changes propagate to all assigned interfaces within seconds.

Ready to Configure?

All networking features are available in Cloud Control. Talk to us or view pricing for your region.

Open Cloud Control View Pricing Contact Sales

You might also be interested in the following products and services.

  • Load Balancers

    Distribute traffic intelligently across your instances for high availability and improved application performance.

  • Floating IPs

    Reassignable public IP addresses that can be moved between instances instantly for seamless failover.

  • Site-to-Site VPN

    Encrypted tunnels connecting your on-premises network to Bamboozle Cloud securely over the public internet.