Support for Software firewall within VPC

[ramzcode]

Hello Cloudstack Team,

This is really awesome, I am trying to understand the stack. Thanks for a detailed document and efforts from the community.

My big question is about securing my VPC, Is there a way I can use a software firewall like Pfsense or OPNsense as my VPN firewall or gateway.

I Don't see any document on the same and my concern is not about using an external Physical Firewall like Cisco or PaloAlto.

It would be great to know if it is possible.

Thanks in advance.

[boring-cyborg]

Thanks for opening your first issue here! Be sure to follow the issue template!

[rajujith]

Hi @ramzcode first of all welcome to the Apache CloudStack Community. In a CloudStack VPC, packet filtering is achieved with Network ACL, and the mostly used provider for it is the virtual router.

However, you can use the firewall in a regular isolated guest network. Again the mostly used provider is 'virtual router' but there are other providers too ( may not be validated for recent versions). Please refer to network offerings.

You could develop an integration for any firewall if you wish so.

[ramzcode]

Hi Thanks for the response, so as of now it is not possible to use a custom virtual firewall like Pfsense or OPNsense for my VPC ?
I cant afford prop right now but want to make sure my VPC us behind a Firewall.

please Let me know if this can achieved.

[rajujith]

Hi Thanks for the response, so as of now it is not possible to use a custom virtual firewall like Pfsense or OPNsense for my VPC ?

Unfortunately not.

I would suggest trying out the VPC ACL itself. If you still wish to use a custom firewall you could use it in the network path I am assuming.

[ramzcode]

Hi Thanks for the response, so as of now it is not possible to use a custom virtual firewall like Pfsense or OPNsense for my VPC ?

Unfortunately not.

I would suggest trying out the VPC ACL itself. If you still wish to use a custom firewall you could use it in the network path I am assuming.

Sure thanks for the time. I will give me best during the free should to check this and post it here on success. Great Team effort !!