This article covers the add-on service VPS SSD. To set up a firewall directly on the server, follow the guide for your operating system or firewall software.
In this article you will learn:
- How the Firewall add-on service works
- How to activate the Firewall
- How to manage Firewall rules
- Frequently Asked Questions
VPS SSD Firewall
The Firewall add-on service is based on the Linux software UFW. Its advantage over running this software on your own server is resource savings: traffic filtering takes place outside the server itself, which saves its performance and connectivity.
This service lets you add up to 5×10 incoming and outgoing firewall rules.
The system applies firewall rules in the order in which they are listed (from top to bottom). Place universal rules at the top and exceptions lower down.
Activating the Firewall
Firewall is an add-on service that you can get either on its own or as part of the Profi plan (applies to the first 10 rules). To activate it, follow these steps:
- Log in to the Customer Administration ⧉.
- In the navigation bar, select Server services VPS SSD.
- From the list, select the service for which you want to manage the Firewall.
- In the left menu, select Add-on services.
- For the first activation, click the button + next to the item Firewall (10 rules), for additional activations Firewall – Add-on Service (10 rules).
- In the add-on service detail, select the quantity (additional activations) and click the button Activate.

To change the number of activations or to deactivate the service, follow the guide Services – Add-on Services.
Managing Firewall rules
After you activate the Firewall add-on service, an item of the same name appears in the left menu for managing the rules. The complete procedure for accessing the Firewall rules is:
- Log in to the Customer Administration ⧉.
- In the navigation bar, select Server services VPS SSD.
- From the list, select the service for which you want to manage the Firewall.
- In the left menu, select Firewall.

Adding a new rule
To add a new rule, follow these steps:
- At the table Incoming rules or Outgoing rules click the button Add.
- Fill in:
- Description: Any text; it is used to identify the rule easily.
- Source IP: A specific IP, or * for all.
- Destination IP: Select a specific IP.
- Port: Choose the type (source/destination) and enter or select a value.
- Protocol: Select a value or leave * (all).
- Action: Select allow/deny.
- Click the button Create Rule.
- Apply the changes.
Managing and deleting rules
To edit a rule’s parameters or delete it, click the magnifier icon on the left side of the table. Make and save your changes in the form, or delete the rule by clicking the button Remove.
To move a rule to a different position (rules placed higher in the list are executed first), use the arrows on the right side of the table.

Frequently Asked Questions
Why don’t the firewall rules work?
Make sure the rules are in the correct order (general ones at the top, specific ones lower down) and that the changes have been applied. If the problem persists, check that you have selected a specific destination IP.
Why should I pay extra for the Firewall when it does the same things as UFW?
You have to run UFW on your own server and it consumes the server’s resources. The Firewall add-on service runs outside the server and puts no load on it.