Implementing the network
We described earlier in this chapter how when a project is created, a default VPC is automatically created for us. This means we can simply reuse that VPC for our modernization work. What remains to be done is implementing the firewall rules we defined previously. To recap, the rules are as follows:
- All inbound traffic from the internet is blocked except for HTTP(S) traffic to the Tomcat servers.
- All inbound traffic to the Redis server is blocked except for the Tomcat servers using the Redis server on the standard port, which is
6379
. - All inbound traffic to the MySQL server is blocked except for the Tomcat servers using the MySQL server on the standard port, which is
3306
.
We will now implement these firewall rules using the following steps:
- In the navigation menu, select VPC network | Firewall rules:
- Ensure that at the top of the window, your project is selected: