Oracle Cloud Infrastructure Documentation

Create a Service

Create a service that you can include in an application list. Use services and service lists to build rules in a firewall policy.

A service is identified by a signature based on the ports it uses. Layer 4 inspection is used to identify matching services. Each policy can have a maximum of 1,900 services.

You can create services one at a time using the following instructions, or you can import many at once using a .json file. See Import Firewall Policy Components for more information.

After you create services, you can add them to a service list in the policy. You can't add services from one policy to a list in a different policy. The service must be created within each policy you want to use it in.

    1. Open the navigation menu, and select Identity & Security. Under Firewalls, select Network Firewall policies.
    2. Select that compartment that contains the policy that you want to create the service in.
    3. Select the policy.
    4. On the details page, select the Services tab.
    5. From within the Services table, select Create service.
    6. In the Name field, enter a name for the service. Avoid entering confidential information.
    7. (Optional) In the Description field, enter a brief summary of the service.
      Use this field to provide details about the service to help other users understand its purpose or configuration. You can enter up to 1,000 characters and can edit this field at any time.
    8. Under Protocol, select TCP or UDP as the protocol to define the service.
    9. Select Create.

  • Use the network-firewall service create command and required parameters to create a service:

    oci network-firewall service create 
--network-firewall-policy-id network firewall policy OCID --compartment-id compartment OCID[OPTIONS]

    For a complete list of parameters and values for CLI commands, see the CLI Command Reference.

  • Run the CreateService operation to create a service.