Firewall Configuration

Last Updated: September 2022

If a firewall is enabled on the server on which you are installing Tethys Portal, you may need to configure it to allow connections through the HTTP port(s). This part of the production installation guide will provide instructions for how this is to be done on the default firewall applications installed on Ubuntu (UWF) and CentOS (firewalld servers.

Configure Firewall Without SSL (HTTP)

Run the following commands to open the HTTP port (80):

Ubuntu:

Use the ufw app list command to list the available configurations:

bash

sudo ufw app list  # e.g.: ‘Nginx Full’, ‘Nginx HTTPS’, ‘Nginx HTTP’

Enable the desired configuration:

bash

sudo ufw allow 'Nginx HTTP'

CentOS:

bash

sudo firewall-cmd --permanent --zone=public --add-service=http
sudo firewall-cmd --reload

Configure Firewall With SSL (HTTPS)

Run the following commands to open the HTTPS port (443):

Ubuntu:

Use the ufw app list command to list the available configurations:

bash

sudo ufw app list  # e.g.: ‘Nginx Full’, ‘Nginx HTTPS’, ‘Nginx HTTP’

Enable the desired configuration:

bash

sudo ufw allow 'Nginx HTTPS'

CentOS:

bash

sudo firewall-cmd --permanent --zone=public --add-service=https
sudo firewall-cmd --reload

Configure Firewall Both (HTTP and HTTPS)

Run the following commands to open the HTTPS port (443) and HTTP port (80):

Ubuntu:

Use the ufw app list command to list the available configurations:

bash

sudo ufw app list  # e.g.: ‘Nginx Full’, ‘Nginx HTTPS’, ‘Nginx HTTP’

Enable the desired configuration:

bash

sudo ufw allow 'Nginx Full'

CentOS:

bash

sudo firewall-cmd --permanent --zone=public --add-service=http
sudo firewall-cmd --permanent --zone=public --add-service=https
sudo firewall-cmd --reload