How to define the security group explicitly

If users do not want the orchestration engine to auto-generate security groups for them, they can define the security groups explicitly on a Port as follows:

  • Drop a SecurityGroup node to the editor.
  • Connect on the dependency point of a Port to the feature point of the SecurityGroup.

Fig. Define security group explicitly

  • Drop one or more SecurityGroupRule component on the SecurityGroup. The figure below shows an inbound rule on port 8080 from the remote

Fig. An example of security group rule

Congratulation! You have completed the basic knowledge of the designer. In the next advance section, you will learn how to model a software component using TOSCA.