google-compute-engine - WinSCP 到谷歌云

Question

我有谷歌云计算引擎实例。我正在尝试使用 winSCP 进行连接。我按照 https://cloud.google.com/compute/docs/instances/connecting-to-instance 的步骤操作

它说明“连接超时错误”应该是什么原因。我需要在谷歌云中打开防火墙吗？但它没有显示在说明中。

Answer 1

是的，您应该为 SSH 协议(protocol)添加 GCE 防火墙规则，以允许此流量到达您要连接的 VM 实例。这是来自 article 的引述:

Each network has its own firewall controlling access to the instances.

All traffic to instances, even from other instances, is blocked by the firewall unless firewall rules are created to allow it.

The default network has automatically created firewall rules, which are shown below. No manually created network of any type has automatically created firewall rules. For all networks except the default network, you must create any firewall rules you need.

Firewall rules are only "allow" rules. You cannot create "deny" rules. If you need to restrict traffic from reaching certain instances, create rules that allow traffic to the other instances, then remove the firewall rule that allowed traffic to all of the instances.

The firewall rules automatically created for the default network are as follows:

default-allow-internal

Allows network connections of any protocol and port between instances on the network.

default-allow-ssh

Allows SSH connections from any source to any instance on the network over > TCP port 22.

default-allow-rdp

Allows RDP connections from any source to any instance on the network over > TCP port 3389.

default-allow-icmp

Allows ICMP traffic from any source to any instance on the network.