Set up security groups, record domain names, and apply for SSL certificates

5、 ... and 、 After buying the cloud server , First, do a good job in the security group

1、 The port of release ： Open only 80,443,ssh port ,ICMP（ping） that will do , Do not release the rest

Pay attention to the following details ：

(1) ICMP（ping） The release of is aimed at Tencent ECs , Alibaba cloud only has tcp/ud The port of , No, icmp( It should be released by default )

(2) Security group configuration ： Before configuring, you need to look at the type of ECS you purchase ,** Be careful ： Lightweight application servers do not have security groups , The function module corresponding to the security group is firewall ; On the cloud server ECS Only the security group function module .**

▷ ECS Security group

A security group is a kind of virtual firewall , State detection and packet filtering capabilities , Used to divide security domains in the cloud . By configuring security group rules , You can control one or more in the security group ECS The inflow and outflow of the instance .

(3) Limit IP source : You can fill in a single IP,CIDR Paragraph or 0.0.0.0/0( On behalf of all IPv4 Address ), Do not fill in default is 0.0.0.0/0, For all IPv4 All addresses are open

■ Port meaning ：

• 80: http Protocol port

• 443：https Protocol port

• ssh port ： The default is 22, For remote connections ( For example, using xshell Tools connect to remote servers ), Default... Is not recommended ssh Port number

Common sense about ECS security settings ： see 《 Common sense of ECS security settings .md》

6、 ... and 、 Product launch ( Domain name resolution 、 Domain name filing )

• Domain name filing is required for the product to go online

1、 Domain name resolution

(1) Create a domain name template

● Steps to create a domain name template ：

• Log in to alicloud account , Click on the console ：

• Click on three bars ：

• Search for domain names , Get into ** Domain name console **：

• Create information template , Then wait until the audit is successful ( A message will be sent to you after the approval [ Generally, it may be during the working period of the staff 2-3 The audit passed within hours ]):

(2) Choose a domain suffix with the right price ： For students , Just buy a cheap domain suffix , Don't buy .com .cn These are expensive

• My domain name suffix is .site [7 Yuan ha ha ha ]

● Steps to purchase a domain name ：

• Log on the official website of aliyun , Select the search icon ：

• Enter a custom domain name , Choose a cheap suffix ：

• Add to the list , Click on the domain name list ：

• Buy now ：

• Select the owner of the domain name as an individual , Then pay ：

• Sign in ** Domain name console **, Waiting for approval ：

(3) Domain name resolution ：

• thus , Later my ip( A string of numbers ) You can use the domain name yilele.site perhaps www.yilele.site Instead of

here ：yilele.site perhaps www.yilele.site The difference between ：yilele.site It's a domain name ; www.yilele.site It's a secondary domain name

Create a secondary domain name

Resolve the domain name to create the secondary domain name through the primary domain name

2、 Domain name filing

• Through the filing instructions , Remind us when we buy services , Try to choose Hong Kong as the address , Then there is no need to put on record .《 ICP The necessity of filing 》
• The problem of filing ： Servers in the mainland need to be filed , Servers in Hong Kong or overseas do not need to be accessible .

(1) Choose free filing ：

(2) Filing process ：

• The filing process can be carried out according to the prompts , After submission for review , Even if not standardized , Alibaba cloud's customer service will remind you after the initial review

• Probably 20 Complete the filing process in about days , There will be SMS notification

7、 ... and 、 Apply for free ssl A security certificate

1、 Apply for free ssl Security certificate steps ：

(1) Console search ssl, Click to enter ssl certificate ( Application security ) Console ：

(2) Buy free ssl certificate ：

(3) Create and request certificates ：

• The certificate application ：

• ssl certificate Successful application ：