# Increase the ssh security

**URL:** <https://forums.docker.com/t/increase-the-ssh-security/43342>\
**Category:** General\
**Tags:** aws, security\
**Created:** [December 22, 2017, 6:39am UTC](https://forums.docker.com/t/increase-the-ssh-security/43342 "2017-12-22T06:39:00Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![asaga](https://avatars.discourse-cdn.com/v4/letter/a/e99b99/32.png) [@asaga](https://forums.docker.com/u/asaga)\
**Post date:** [December 22, 2017, 6:39am UTC](https://forums.docker.com/t/increase-the-ssh-security/43342/1 "2017-12-22T06:39:01Z")

</div>

Hi everybody,

How can I increase the security over ssh service on the manager nodes ? Can I restrict the access using security groups ?

Thanks!

---

<div class="post-metadata">

**Author:** ![emilyshepherd](https://sea3.discourse-cdn.com/docker/user_avatar/forums.docker.com/emilyshepherd/32/18421_2.png) [@emilyshepherd](https://forums.docker.com/u/emilyshepherd)\
**Post date:** [January 9, 2018, 11:50pm UTC](https://forums.docker.com/t/increase-the-ssh-security/43342/2 "2018-01-09T23:50:38Z")

</div>

Yes, Docker’s CloudFormation template adds all Managers into a security group called:

> [Your Stack Name]-ManagerVpcSG-[Unknown Code]

One of the entries in this is SSH, allowing access from 0.0.0.0/0, which is the whole internet. You can change this as you wish, or add new SSH related entries. Internally, the stack doesn’t use SSH for any inter-node communication, so it’s safe for you to amend the SSH rules as you see fit.

Hope this helps 🙂 x