How to define the security group explicitly

If users do not want the orchestration engine to auto-generate security groups for them, they can define the security groups explicitly on a Port as follows:

  • Drop a SecurityGroup node to the editor.
  • Connect on the dependency point of a Port to the feature point of the SecurityGroup.

Fig. Define security group explicitly

  • Drop one or more SecurityGroupRule component on the SecurityGroup. The figure below shows an inbound rule on port 8080 from the remote 0.0.0.0/0.

Fig. An example of security group rule

Congratulation! You have completed the basic knowledge of the designer. In the next advance section, you will learn how to model a software component using TOSCA.