Reputation: 31
When I create an instance in Google Compute Engine the instance is created with a default network and firewall. Does this firewall preclude the use of activating the firewall in Ubuntu itself?
In other words, is enabling the ufw in Ubuntu redundant for an ecommerce implementation?
Thank you.
Upvotes: 3
Views: 712
Reputation: 522
It is not redundant, as long as you enabled ufw and permitted port 22. Cause most of the time once ufw has been enabled on the VM instance side. Port 22 is always forgot to exclude.
GCP firewall rules is different to UFW of VM instance.
Upvotes: 0
Reputation: 19835
Wont hurt to run additional firewalls. Some may have richer features that the GCE firewall doesnt have, or might help in case the GCE firewall has a security hole.
The drawback is that its more work to configure and later maintain individual firewalls if you have several instances, and you will consume a little more resources to run the extra firewall.
Upvotes: 3