- Looking at your instance info, find VNIC section, click "Public Subnet".
- Click on your security list.
- Add a new entry with the following options:
- "Stateless" = No, "Source" = 0.0.0.0/0, "IP Protocol" = TCP, "Source Port Range" = All, "Destination Port Range" = 80
- SSH to your instance.
- While SSH'ed in your instance, run command
firewall-cmd --permanent --add-service=http. - While SSH'ed in your instance, run command
firewall-cmd --reload. - Now start Apache, NGINX, or whatever server you need to on port 80. You can now access from the internet.
As of 2025/07/26, using Oracle Linux 9 on an Ampere instance, these
firewall-cmdrules are exactly right (modulo adding sudo), thanks so much!For general information, the zone that's affected when you don't specify a zone is the "public" zone. You can see all the rules on that zone like this: