Repository navigation
Support for Software firewall within VPC #7627
Description
Hello Cloudstack Team,
This is really awesome, I am trying to understand the stack. Thanks for a detailed document and efforts from the community.
My big question is about securing my VPC, Is there a way I can use a software firewall like Pfsense or OPNsense as my VPN firewall or gateway.
I Don't see any document on the same and my concern is not about using an external Physical Firewall like Cisco or PaloAlto.
It would be great to know if it is possible.
Thanks in advance.
Activity
boring-cyborg commentedon Jun 14, 2023
Thanks for opening your first issue here! Be sure to follow the issue template!
rajujith commentedon Jun 15, 2023
Hi @ramzcode first of all welcome to the Apache CloudStack Community. In a CloudStack VPC, packet filtering is achieved with Network ACL, and the mostly used provider for it is the virtual router.
However, you can use the firewall in a regular isolated guest network. Again the mostly used provider is 'virtual router' but there are other providers too ( may not be validated for recent versions). Please refer to network offerings.
You could develop an integration for any firewall if you wish so.
ramzcode commentedon Jun 19, 2023
Hi Thanks for the response, so as of now it is not possible to use a custom virtual firewall like Pfsense or OPNsense for my VPC ?
I cant afford prop right now but want to make sure my VPC us behind a Firewall.
please Let me know if this can achieved.
rajujith commentedon Jun 20, 2023
Unfortunately not.
I would suggest trying out the VPC ACL itself. If you still wish to use a custom firewall you could use it in the network path I am assuming.
ramzcode commentedon Jun 22, 2023
Sure thanks for the time. I will give me best during the free should to check this and post it here on success. Great Team effort !!
github-actions commentedon Sep 22, 2026
This issue is stale because it has been open for 120 days with no activity. It may be removed by administrators of this project at any time. Remove the stale label or comment to request for removal of it to prevent this.