What Is Internet Firewall?
The internet boundary refers to the boundary between the internet and the Tencent Cloud private network. Internet boundary traffic is the traffic communicated between your cloud assets and the internet, also known as north-south traffic.
The Internet Firewall is a firewall that inspects north-south traffic and is a cluster-based firewall.
The Internet Firewall operates between your EIP-associated assets and the external internet.
What Assets Does Internet Firewall Protect?
The asset types supported by the current version are CVM, CLB, NAT Gateway, and VPN Gateway. Assets in the Chinese mainland and Hong Kong (China) regions are supported.
What Types of Public IP Addresses Do Not Appear in the Internet Firewall Switch List?
The current version supports BGP IP address as the public IP address type and does not currently support triple-line IP address. When identifying user assets, CFW automatically filters out triple-line IP addresses.
How to Scale Out to Enhance Protection When Public IP Address Quotas Are Insufficient
The Premium, Enterprise, and Ultimate editions can improve their specifications through elastic scaling. For every 1 Mbps of bandwidth added, one public IP address quota is also increased.
What Are Assets Labeled as "Other"?
The Internet Firewall identifies assets based on users' public IP addresses. If a public IP address is not bound to an asset, it will be identified as "Other". Rules associated with that IP address will take effect normally after the IP address is bound to an asset.
Why Is the IP Address Still Accessible After the Internet Firewall Toggle Is Enabled?
After you enable the Internet Firewall toggle for an IP address, go to Access Control > Internet Border Rule and check whether the rule policy type for this IP address is Block or Observe. Traffic is blocked only when the policy is Block. The details of IP address rule policy types are as follows: Allow: Permit traffic that hits a rule, record the number of hits and traffic logs, but do not record access control logs.
Observe: Permit traffic that hits a rule, and record the number of hits, access control logs, and traffic logs.
Block: Block traffic that hits a rule, record the number of hits and access control logs, and record one request packet information in the traffic log.