UNet ACL

Network ACL is a subnet-level security policy used to control the data flow in and out of the subnet. Users can precisely control the traffic in and out of the subnet by setting outbound and inbound rules.

Create ACL

Log in to the console, select "Private Network VPC" in [Products & Services], and enter the private network page. You can create an ACL instance by clicking the "Create ACL" button in the Network ACL tag.

Select the VPC to which the ACL belongs, enter the ACL name, and click "OK".

Creation completed, you can see the newly created ACL instance in the list.

Edit Inbound Rules

In the details page, select the "Inbound Rules" tab. Click "Add Inbound Rule" to add an inbound rule.
In the pop-up edit box, select the policy, protocol type, fill in the source IP, port, and priority information. Click "OK" to add.

After adding, you can edit and delete the rules. The default rules cannot be edited or deleted.

Edit Outbound Rules

In the details page, select the "Outbound Rules" tab. Click "Add Outbound Rules" to add inbound rules.
In the pop-up edit box, select the policy, protocol type, fill in the target IP, port and priority information. Click "OK" to add.

After adding, you can edit and delete the rules. The default rules cannot be edited or deleted.

Associate Subnet

After the rule editing is completed, you can click "Details" to enter the ACL overview page. Click "Bind" to bind the ACL with the subnet under the associated VPC.

After clicking "OK", you can bind it.

Click "Unbind" to unbind the ACL from the subnet. Batch unbinding operations can be performed.