Network Security Group

ociFirewalloci-network-security-group

Virtual firewall applied to a set of VNICs rather than a subnet.

Provider
oci
Category
Security
Also known as
NSG
Properties · 6 set by this component
propertytypevaluesrequiredkind defaultthis component
defaultActionenumallow | denyno—▸ deny
intrusionPreventionboolean—no—▸ false
loggingboolean—no—▸ false
managedboolean—nofalse▸ true
maxNsgsPerVnic · component propertyinteger—no5inherited
maxRules · component propertyinteger—no120inherited
nsgReferencesAllowed · component propertyboolean—notrueinherited
ruleCountinteger—no—▸ 0
scope · component propertyenumvnicnovnicinherited
statefulboolean—no—▸ true
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "network-security-group", component: "oci-network-security-group" }
Other Firewall products · 35
Cloud Firewallalibaba-cloud-firewallalibabacloudfirewallNetwork ACLalibaba-network-aclalibabacloudfirewallECS Security Groupalibaba-security-groupalibabacloudfirewallNetwork ACLaws-network-aclawsfirewallAWS Network Firewallaws-network-firewallawsfirewallAmazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewallSecurity groupaws-security-groupawsfirewallMicrosoft Entra Internet Accessazure-entra-internet-accessazurefirewallAzure Firewallazure-firewallazurefirewallNetwork Security Groupazure-network-security-groupazurefirewallNetwork security perimeterazure-network-security-perimeterazurefirewallCloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewallCloudflare Gatewaycloudflare-gatewaycloudflarefirewallCloudflare Network Firewallcloudflare-network-firewallcloudflarefirewallGeneric firewallfirewallfirewallFirewall appliancefirewall-appliancefirewallFortinet FortiGatefortigatefirewallMikroTik RouterOSmikrotik-routerosfirewallnftablesnftablesfirewallOPNsenseopnsensefirewallPalo Alto Networks NGFWpalo-alto-ngfwfirewallpfSensepfsensefirewallSnortsnortfirewallSuricatasuricatafirewallVyOSvyosfirewallDigitalOcean Cloud Firewallsdigitalocean-cloud-firewalldigitaloceanfirewallCloud IDSgoogle-cloud-idsgcpfirewallCloud NGFWgoogle-cloud-ngfwgcpfirewallSecure Web Proxygoogle-secure-web-proxygcpfirewallIBM Cloud Hardware Firewallibm-firewallibmfirewallVPC Security Groupibm-security-groupibmfirewallNetworkPolicyk8s-network-policyk8sfirewallNetwork Firewalloci-network-firewallocifirewallSecurity Listoci-security-listocifirewallSecurity Groupoutscale-security-groupoutscalefirewall
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Oracle Cloud network security group: virtual firewall applied to a set of VNICs rather than a
# subnet, created empty with no rules, denying anything no rule allows ("Network Security Groups").
# Service Limits: 120 rules per NSG, 5 NSGs per VNIC, 1,000 NSGs per VCN.
schemaVersion: "1"
type: "component"
id: "oci-network-security-group"
kind: "firewall"
provider: "oci"
docs: "https://docs.oracle.com/en-us/iaas/Content/Network/Concepts/networksecuritygroups.htm"
aliases: ["NSG"]
defaults:
  managed: true
  defaultAction: "deny"
  stateful: true
  ruleCount: 0
  logging: false
  intrusionPrevention: false
properties:
  scope:
    type: "enum"
    values: ["vnic"]
    default: "vnic"
  nsgReferencesAllowed:
    type: "boolean"
    default: true
  maxRules:
    type: "integer"
    default: 120
  maxNsgsPerVnic:
    type: "integer"
    default: 5

The same page as markdown, for an agent: /catalogue/components/oci-network-security-group.md