# Infrastructure Firewall Rules This page explains how to create and manage **infrastructure-level firewall rules** in DuploCloud for your Google Cloud Platform (GCP) environment. These firewall rules control inbound and outbound network traffic to your virtual machines and other infrastructure resources. Rules define whether traffic is allowed or denied based on source IP ranges, protocols, ports, and targets. These rules are stateful, meaning return traffic is automatically allowed, and they apply broadly at the infrastructure level to secure your entire environment. Common use cases for infrastructure firewall rules include: * Allowing HTTP/HTTPS traffic to web servers * Restricting SSH access to specific IP ranges * Blocking traffic from known malicious IPs You can create, update, and manage these firewall rules directly from the DuploCloud Portal. ## Creating an Infrastructure Firewall Rule 1. In the DuploCloud Portal, navigate to **Administrator** -> **Infrastructure**. 2. Click the infrastructure name in the **NAME** column. 3. Select the **Firewall Rules** tab. 4. Click **Add**. The **Add Firewall Rule** pane displays.

5. Complete the fields:

Field	Description
Name	Enter a unique name for the rule.
Description	Optionally, enter a description explaining the rule’s purpose.
Source Type	Select the source type for the firewall rule (e.g., IPv4 ranges).
Source Value	Enter the IP address or CIDR range(s) that define the source of the traffic, e.g., `10.0.0.0` or `10.0.0.0/8`.
Action	Choose Allow or Deny.
Protocol and Ports	Choose Allow all to permit all protocols and ports, or Specified protocols and ports to define particular protocols (TCP, UDP, SCTP, etc.) and port ranges.

6. Click **Add** to create the firewall rule. {% hint style="info" %} **Tip:** Use clear, descriptive names, follow the principle of least privilege by only allowing required traffic, and regularly audit rules to remove unused or overly permissive entries. {% endhint %}

**Firewall Rules** tab for the Auto infrastructure

## Managing Existing Infrastructure Firewall Rules Edit or delete firewall rules directly from the DuploCloud Portal. 1. In the DuploCloud Portal, navigate to **Administrator** -> **Infrastructure**. 2. Click the infrastructure name in the **NAME** column. 3. Select the **Firewall Rules** tab. 4. Click the menu icon (

) in the row of the firewall rule you want to manage. 5. Choose one of the following options: * **Edit**: Opens the **Update Firewall Rule** pane to modify the firewall rule configuration. * **Remove Rule**: Deletes the firewall rule after confirmation.