CODEWITHSUNDEEP
network-programmingfirewallgoogle-compute-engine
regretoverflow
regretoverflow

Reputation: 2153

Blocking traffic from specific subnets in GCE firewall

I know how to add firewalls to allow traffic, but i want to also block APNIC traffic as well. Is there a way to drop traffic from a subnet? I can't seem to come up wit a set of rules that will do it.

Currently, My network has firewalls in place to allow traffic to the proper ports for my applications. Now I want to add rules to exclude a block of IPs from accessing my application.

What I have tried is creating a rule for a block of IPs, add all tcp and udp ports, then NOT adding any destination tags, thinking if it sees traffic from these subnets, but it has no destination, it will drop it. That doesn't seem to work.

Upvotes: 2

Views: 894

Answers (1)

Faizan
Faizan

Reputation: 1967

By default all the incoming traffic to your GCE network is blocked. You create firewall rules to allow the connection for IP or range of IPs and the port. You can refer to the following article for more information https://developers.google.com/compute/docs/networking#firewalls

Upvotes: 1

Related Questions