This article covers the add-on service VPS SSD. To configure the firewall directly on the server, follow the instructions for your operating system or firewall software.
In this article, you will learn:
- How the Firewall add-on service works
- How to activate Firewall
- How to manage Firewall rules
- Frequently asked questions
VPS SSD Firewall
The Firewall add-on service is based on the Linux software UFW. Its advantage over running this software on your own server is saving resources - traffic filtering takes place outside the server itself, thus saving its performance and connectivity.
Within this service, you can add up to 5×10 incoming and outgoing firewall rules.
The system applies firewall rules in the order in which they are listed (from top to bottom). Therefore, place general rules at the top and exceptions lower down.
Firewall activation
Firewall is an add-on service that you can obtain either separately or as part of the Profi plan (applies to the first 10 rules). Activate it by following these steps:
- Log in to the customer administration ⧉.
- In the navigation bar, select Server services VPS SSD.
- Select the service from the list for which you want to activate Firewall.
- In the left menu, select Additional services.
- For the first activation, click the + button next to Firewall (10 rules); for additional activations, click Firewall - add-on service (10 rules).
- In the add-on service detail, select the quantity (additional activations) and click the Activate button.

To change the number of activations or deactivate the service, follow the instructions in Services - Add-on services.
Firewall rule management
After activating the Firewall add-on service, an item of the same name appears in the left menu for rule management. The complete procedure to access Firewall rules is:
- Log in to the customer administration ⧉.
- In the navigation bar, select Server services VPS SSD.
- Select the service from the list for which you want to activate Firewall.
- In the left menu, select Firewall.

Adding a new rule
To add a new rule, follow these steps:
- In the table Incoming rules or Outgoing rules, click the Add button.
- Fill in:
- Description: Any text, used for easy identification of the rule.
- Source IP: Specific IP, or * for all.
- Destination IP: Select a specific IP.
- Port: Choose source/destination type and enter or select a value.
- Protocol: Select or leave the value * (all).
- Action: Select allow/deny.
- Click the Create rule button.
- Apply the changes.
Managing and deleting rules
To edit rule parameters or delete the rule, click the magnifying glass icon on the left side of the table. In the form, make and save the changes, or delete the rule by clicking the Remove button.
To move a rule to a different order (rules placed higher in the list are executed first), use the arrows on the right side of the table.

Frequently asked questions
Why are the firewall rules not working?
Make sure the rules are listed in the correct order (general at the top, specific below) and that the changes are applied. If the problem persists, check that you have selected a specific destination IP.
Why should I pay for an extra Firewall when it can do the same things as UFW?
UFW has to run on your server and consume resources there. The Firewall add-on service runs outside the given server and does not burden it in any way.