Console Create a server

Firewalls on the host, in front of the server.

A firewall filters traffic on the host’s network, before it reaches your server. Its rules hold however the server is set up, and firewalls have no charge.

Create a server See pricing

Included at no cost

Features

Rules that follow your servers.

  • Stateful

    Replies to allowed traffic pass back on their own, so you write rules only for the connections you expect.

  • Attached by label

    Attach a firewall to a label, and every server with that label gets its rules from the first boot.

  • Several per server

    Combine firewalls, such as one for SSH from the office and one for the web, and their rules add up.

  • Changes in 5 seconds

    An edited rule reaches every attached server within 5 seconds, with no restart and no dropped connections.

  • IPv4 and IPv6

    Rules match TCP, UDP, ICMP, ESP and GRE by port range and by CIDR, in both address families.

  • Logs of dropped traffic

    Turn on logging, and see what a firewall drops in the console or in your own syslog collector.

Code

Rules as code.

The logiciel_firewall resource holds the rules, and a label decides which servers they apply to.

  • Inbound traffic denied unless a rule allows it.
  • Outbound traffic allowed unless you add outbound rules.
  • Applied to every server with the label, as it is created.
firewall.tf
resource "logiciel_firewall" "web" {
  name     = "web"
  apply_to = { label = "role=web" }

  inbound {
    protocol = "tcp"
    port     = "443"
    source   = ["0.0.0.0/0", "::/0"]
  }
  inbound {
    protocol = "tcp"
    port     = "22"
    source   = ["198.51.100.0/24"]
  }
}

Available in

Questions

Questions about firewalls.

FAQ
What happens to a server with no firewall?
All traffic reaches it, and only its own packet filter stands in the way. Attach a firewall to it, or set a default firewall that every server in the project receives.
Does dropped traffic count toward my allowance?
No. Traffic that a firewall drops never reaches the server, and inbound traffic is not counted in any case.
Do firewalls filter private networks?
No. Firewalls filter the public interfaces only. Filter traffic between your servers on the servers themselves, or with Kubernetes network policies.

Start with one server and one command.

Choose a region and a plan, and add an SSH key. The server answers SSH 38 seconds after the command, at the price on its spec sheet.

Create a server See pricing

logi-ciel is a design concept

This site is a portfolio piece by Soheyb. The brand, the pages and the price list are real design work; the cloud behind them is not. There’s no console to sign in to, and no server to rent.

Back to the site