CloudNexus Firewall Rules

Priority	Name	Proto	Port	Source	Action
10	Block Known Bots	TCP	443	Known-Bot-List	🚫 Block
20	Allow Internal API	TCP	8080	10.0.0.0/8	✅ Allow
30	Rate Limit: /login	HTTP	443	Any Path:/login	⚠️ Rate Limit
40	Geo-Block: High Risk	Any	*	Region: XX, YY	🚫 Block
1000	Default Deny	Any	*	Any	🚫 Block

Capabilities

Advanced Firewall Features

Everything you need to secure your cloud infrastructure without complexity.

🧱

Stateful Packet Inspection

Track connection states across all layers. Automatically handle related packets and prevent spoofing attacks.

🌍

Geographic Filtering

Allow or deny traffic based on country, region, or city. Perfect for compliance and localized access control.

🤖

Bot Management

AI-powered bot detection distinguishes between legitimate crawlers, bad bots, and human users automatically.

📊

Real-time Analytics

Visualize traffic patterns, blocked threats, and rule hits in real-time. Export logs to your SIEM tools.

⚡

Instant Propagation

Changes to firewall rules propagate to all 50+ global edge nodes in under 60 seconds.

🔌

Infrastructure as Code

Manage rules via Terraform, CLI, or REST API. Version control your security posture.

CLI: Create Firewall Rule

                    # Create a rule to block traffic from a specific IP range

                    cnx firewall rule create \
                      --name "Block Suspicious IP" \
                      --source "192.168.50.0/24" \
                      --action block \
                      --protocol tcp \
                      --port 443 \
                      --priority 50


                    # Apply rule to a specific droplet group

                    cnx firewall attach \
                      --firewall-id fw-892a1 \
                      --droplet-group prod-web-servers
                

Use Cases

Common Security Patterns

How our customers use CloudNexus Firewall Rules to secure their stack.

🏦

Fintech Compliance

Restrict database access to internal VPC IPs only, while allowing public API traffic with strict rate limiting and geo-fencing.

🛒

E-Commerce Protection

Prevent scraping and inventory hoarding by identifying aggressive bots and challenging suspicious sessions with CAPTCHAs.

🎮

DDoS Mitigation

Automatically absorb volumetric attacks at the edge. Configure SYN flood protection and connection limits per source IP.

🔑

Zero Trust Access

Enforce MFA and device posture checks for administrative access to Kubernetes clusters and management consoles.

Intelligent Firewall Rules for Modern Infrastructure