Docs Networking & Security

Firewall Configuration

Last updated 2 April 2026

Overview

Every AFRICLOUD server includes a built-in firewall managed directly from the dashboard. You can create inbound and outbound rules without SSH access.

Managing Firewall Rules

  1. Go to Compute and select your server
  2. Click the Firewall tab
  3. Click Add Rule to create a new rule

Rule Options

Each rule includes:

  • Direction — Inbound (incoming traffic) or Outbound (outgoing traffic)
  • Action — Accept, Drop, or Reject
  • Protocol — TCP, UDP, or ICMP
  • Port — single port (e.g. 22) or range (e.g. 8000-9000)
  • Source/Destination — IP address or CIDR range (e.g. 10.0.0.0/8)

Common Rules

| Purpose | Direction | Protocol | Port | Source | |---------|-----------|----------|------|--------| | SSH access | Inbound | TCP | 22 | Your IP | | HTTP | Inbound | TCP | 80 | Any | | HTTPS | Inbound | TCP | 443 | Any | | MySQL | Inbound | TCP | 3306 | VPC only |

IP Spoofing Protection

AFRICLOUD automatically enables IP filtering on all servers. Your server can only send traffic from its assigned IP addresses. This prevents IP spoofing attacks.