Typical applications of security group rules - User Guide| Alibaba Cloud Documentation Center

This article introduces the typical applications of security group rules. It applies to instances in classic and VPC network.

The typical applications listed in this article include:

Use SSH to connect to Linux instances remotely

After you create a Linux ECS instance, you can use SSH to connect to the ECS instance remotely. Add the following security group rules.

After the Windows ECS instance has been created, use RDP to connect to the ECS instance remotely. Add the following security group rules.

After creating the ECS instance, use Ping program to test the communication status between the ECS instances. Add the following security group rules.


Network Type	Network Card Type	Rule Direction	Authorization Policy	Protocol Type	Port Range	Authorization Type	Authorization Object	Priority
VPC network	No configuration required	Direction of entry	Allow	ICMP	-1/-1	Address segment or security group access	Fill it in according to license type, see add security group rules.	1
Classic network	Public network

If you use your instance as a Web server, install the Web server program on the instance, and add the following security group rules.

	Note
	You must start the Web server program, and verify if port 80 works properly.

If you cannot access your instance through the http://public network IP address, verify if the TCP port 80 works properly.

To use FTP to upload/download files to/from the ECS instance, add the following security group rules.

	Note
	You must install the FTP program on the instance, and verify if port 20/21 works properly.