Do AWS Security Group and Azure Network Security Group work the same way?

user_4093955 0
Viewed 3405

I designed an architecture to be mainly hosted in AWS, but some of our customers are demanding that for working with them, we must deploy to Azure as well.

I think the logic behind the infrastructure is the same, i.e. the traffic is received by load balancers which then forward the traffic to the instances behind them.

The problem I'm seeing is that I'm not sure if AWS Security Groups and Azure NSG are "interchangeable", meaning that they work exactly the same way, so I can just "dump" the same AWS config to Azure. AFAIK, Security Groups in Amazon are kind of a host-based firewall, defining rules for each instance. However, I'm reading Azure docs, and it looks like NSG covers a wider area, not only instance-level but also ACLs to subnets and more.

So basically the question is: is there any simple way of translating AWS Security Group configuration to Azure NSG? Is it even possible?

I've found this old question but when it was asked, Azure NSG weren't available.

azure amazon-web-services security
3 Answers

One other difference I want to point out -- My experience of working with RHEL VMs on both of the clouds.

With AWS Security groups (kind of firewalls to the VMS), you don't need to open the ports on the VM itself.

For Azure, you have to open the ports at the VM level even when you have allowed traffic on a given port in the NSG. So in this way, I consider NSG is one layer above the Security if you would want to compare them.

Please see below link for more information.

https://social.msdn.microsoft.com/Forums/en-US/0ea234be-0b1a-41b9-8d44-dd23e3c3f2c2/azure-network-security-group-versus-linux-vm-firewall?forum=windowsazuredata#0ea234be-0b1a-41b9-8d44-dd23e3c3f2c2

Thanks, Murali

user_59433850
Related