After you enable IPv6 Internet bandwidth, you can create egress-only rules to allow only outbound traffic from an IPv6 address. The associated instance can initiate connections to IPv6 endpoints over the Internet, but external IPv6 clients cannot access the instance.
You cannot create egress-only rules for IPv6 addresses that are not associated with network instances.
Prerequisites
IPv6 Internet bandwidth is purchased for the target IPv6 address. Enable and manage IPv6 Internet bandwidth.
Create an egress-only rule
If the IPv6 gateway currently accepts inbound traffic, creating an egress-only rule denies inbound access from IPv6 clients over the Internet. Proceed with caution.
- Log on to the IPv6 Gateway console.
- In the top navigation bar, select the region where the IPv6 gateway is deployed.
-
On the IPv6 Gateway page, click the ID of the target IPv6 Gateway.
-
On the details page of the IPv6 gateway, choose .
-
In the Create Egress-only Rule panel, configure the following parameters and click OK.
Parameter
Description
Resource Group
Select a resource group for the egress-only rule.
Associate Instance
Select an ECS instance or elastic network interface (ENI) with an IPv6 address enabled for Internet access.
IPv6 Address
Select the IPv6 address.
Delete an egress-only rule
You can delete an egress-only rule at any time. After you delete the rule for an IPv6 address with Internet bandwidth purchased, the address allows both inbound and outbound Internet traffic.
- Log on to the IPv6 Gateway console.
- In the top navigation bar, select the region where the IPv6 gateway is deployed.
-
On the IPv6 Gateway page, click the ID of the target IPv6 Gateway.
-
On the IPv6 Gateway details page, click the Egress-only Rule tab, find the target rule, and click Delete in the Actions column.
-
In the Delete Rule dialog box, click OK.
References
-
CreateIpv6EgressOnlyRule: creates an egress-only rule for an IPv6 address.
-
DeleteIpv6EgressOnlyRule: deletes an egress-only rule.