Network Security Group
Virtual firewall applied to a set of VNICs rather than a subnet.
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| defaultAction | enum | allow | deny | no | — | ▸ deny |
| intrusionPrevention | boolean | — | no | — | ▸ false |
| logging | boolean | — | no | — | ▸ false |
| managed | boolean | — | no | false | ▸ true |
| maxNsgsPerVnic | integer | — | no | 5 | inherited |
| maxRules | integer | — | no | 120 | inherited |
| nsgReferencesAllowed | boolean | — | no | true | inherited |
| ruleCount | integer | — | no | — | ▸ 0 |
| scope | enum | vnic | no | vnic | inherited |
| stateful | boolean | — | no | — | ▸ true |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
No rule reads this kind yet. That is a gap, not a guarantee.
nodes:
- { id: "network-security-group", component: "oci-network-security-group" }Cloud Firewallalibaba-cloud-firewallNetwork ACLalibaba-network-aclECS Security Groupalibaba-security-groupNetwork ACLaws-network-aclAWS Network Firewallaws-network-firewallAmazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallSecurity groupaws-security-groupMicrosoft Entra Internet Accessazure-entra-internet-accessAzure Firewallazure-firewallNetwork Security Groupazure-network-security-groupNetwork security perimeterazure-network-security-perimeterCloudflare DNS Firewallcloudflare-dns-firewallCloudflare Gatewaycloudflare-gatewayCloudflare Network Firewallcloudflare-network-firewallGeneric firewallfirewallFirewall appliancefirewall-applianceFortinet FortiGatefortigateMikroTik RouterOSmikrotik-routerosnftablesnftablesOPNsenseopnsensePalo Alto Networks NGFWpalo-alto-ngfwpfSensepfsenseSnortsnortSuricatasuricataVyOSvyosDigitalOcean Cloud Firewallsdigitalocean-cloud-firewallCloud IDSgoogle-cloud-idsCloud NGFWgoogle-cloud-ngfwSecure Web Proxygoogle-secure-web-proxyIBM Cloud Hardware Firewallibm-firewallVPC Security Groupibm-security-groupNetworkPolicyk8s-network-policyNetwork Firewalloci-network-firewallSecurity Listoci-security-listSecurity Groupoutscale-security-group
# yaml-language-server: $schema=../../schema/component.schema.json # Oracle Cloud network security group: virtual firewall applied to a set of VNICs rather than a # subnet, created empty with no rules, denying anything no rule allows ("Network Security Groups"). # Service Limits: 120 rules per NSG, 5 NSGs per VNIC, 1,000 NSGs per VCN. schemaVersion: "1" type: "component" id: "oci-network-security-group" kind: "firewall" provider: "oci" docs: "https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/networksecuritygroups.htm" aliases: ["NSG"] defaults: managed: true defaultAction: "deny" stateful: true ruleCount: 0 logging: false intrusionPrevention: false properties: scope: type: "enum" values: ["vnic"] default: "vnic" nsgReferencesAllowed: type: "boolean" default: true maxRules: type: "integer" default: 120 maxNsgsPerVnic: type: "integer" default: 5