IPs, Reverse DNS and Firewall

Extra IPs

On a VPS's Manage tab, IP addresses adds the next free address of an IPv4 or IPv6 IP pool to the VPS. It restarts to use it. Removing an IP puts it back in its pool.

For IPv6, add a pool with an IPv6 range and gateway. With a provider virtual MAC, attach extra IPv4 addresses to the same virtual MAC at your provider too.

Reverse DNS

The Reverse DNS card sets the hostname each of the VPS's IPs points back to. Clients can set it for their own VPS once the hostname has an A or AAAA record pointing at the IP. It needs the rDNS package with a DNS provider set up under System, Settings, DNS: PowerDNS, Cloudflare or OVHcloud.

For OVHcloud IPs, choose OVH as the provider, set the API host to ovh-eu (or ovh-ca, ovh-us) and the API key to application key:application secret:consumer key, created at eu.api.ovh.com/createToken with these rights: GET /ip, POST /ip/*/reverse, DELETE /ip/*/reverse/*.

Firewall

The Firewall tab holds inbound rules, checked top to bottom on new connections: allow or block TCP, UDP, ICMP or all traffic, for a port or port range, from anywhere or one network. Choose whether everything else is allowed or blocked. Replies to the VPS's own traffic always get in. Clients can edit their VPS's rules too.

Anti-spoofing (admins) stops a VPS from sending traffic from a MAC or IP address it wasn't given.

Both apply within seconds, without a restart. They aren't available for a VPS on a provider virtual MAC or on a direct-network hypervisor: that traffic doesn't pass through the hypervisor, and the provider already ties each IP to its MAC.