I would like to ask if the configuration of "firewall rules eg. only allowing port 80.. when configuring a server instance on cloud services such as google cloud and amazon aws is securely equivalent to hardware firewall implementations."

Are there settings or configuration on the "cloud instance firewall" cannot be achieved as compared to the hardware firewall?

Could someone help me clear this doubt that I can't be sure of? Thanks.

  • Are you asking how a hardware firewall appliance compares to a virtual firewall appliance and the software firewall on a operating system, or am I missing something and are you after something else?
    – HBruijn
    Dec 12, 2014 at 14:12
  • @HBrujin I was referring to the "instance's firewall - for eg. at google cloud as opposed to hardware firewalls. If they serve the same purpose, or could I say that they are securely equivalent since we can't put a hardware firewall on the cloud. Dec 12, 2014 at 14:38

1 Answer 1


At high level and functionally they're mostly equivalent. In both cases the functionality will allow you to block or grant access to certain network ports to/from remote networks, regardless of how the server itself is configured.

The underlying technology could be fundamentally different i.e. rather than the state-full packet inspection that is the more common method in traditional firewalls, the software defined network typically associated with the cloud may be using the routing control plane to allow or deny certain flows.

Something you normally don't get to see with cloud firewall services is statistics on what is blocked.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.