:_mod-docs-content-type: ASSEMBLY
[id="microshift-using-a-firewall"]
= Using a firewall
include::_attributes/attributes-microshift.adoc[]
:context: microshift-firewall

toc::[]

Firewalls are not required in {microshift-short}, but using a firewall can prevent undesired access to the {microshift-short} API.

include::modules/microshift-firewall-about.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources

* xref:../microshift_networking/microshift-firewall.adoc#microshift-firewall-req-settings_microshift-firewall[Required firewall settings]
* xref:..//microshift_networking/microshift-firewall.adoc#microshift-firewall-allow-traffic_microshift-firewall[Allowing network traffic through the firewall]

include::modules/microshift-firewalld-install.adoc[leveloffset=+1]

include::modules/microshift-firewall-req-settings.adoc[leveloffset=+1]

include::modules/microshift-firewall-opt-settings.adoc[leveloffset=+1]

[role="_additional-resources"]
.Additional resources
* link:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/configuring_and_managing_networking/using-and-configuring-firewalld_configuring-and-managing-networking#closing-unused-or-unnecessary-ports-to-enhance-network-security_controlling-network-traffic-using-firewalld[Closing unused or unnecessary ports to enhance network security]

include::modules/microshift-firewall-add-services.adoc[leveloffset=+1]

include::modules/microshift-firewall-allow-traffic.adoc[leveloffset=+1]

include::modules/microshift-firewall-apply-settings.adoc[leveloffset=+1]

include::modules/microshift-firewall-verify-settings.adoc[leveloffset=+1]

include::modules/microshift-firewall-update-for-service.adoc[leveloffset=+1]

[id="additional-resources_microshift-using-a-firewall_{context}"]
[role="_additional-resources"]
== Additional resources

* link:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/configuring_firewalls_and_packet_filters/using-and-configuring-firewalld_firewall-packet-filters[RHEL: Using and configuring firewalld]

* link:https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/configuring_firewalls_and_packet_filters/using-and-configuring-firewalld_firewall-packet-filters#viewing-the-current-status-and-settings-of-firewalld_using-and-configuring-firewalld[RHEL: Viewing the current status of firewalld]

include::modules/microshift-firewall-known-issue.adoc[leveloffset=+1]