{"id":132537,"date":"2026-10-28T14:54:35","date_gmt":"2026-10-28T07:54:35","guid":{"rendered":"https:\/\/tino.vn\/blog\/?p=132537"},"modified":"2026-10-28T14:55:27","modified_gmt":"2026-10-28T07:55:27","slug":"cau-hinh-tuong-lua-cho-vps","status":"publish","type":"post","link":"https:\/\/tino.vn\/blog\/cau-hinh-tuong-lua-cho-vps\/","title":{"rendered":"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS t\u1eeb A-Z"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>\u0110\u1ec3 c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS, b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng UFW tr\u00ean Ubuntu\/Debian ho\u1eb7c firewalld tr\u00ean AlmaLinux\/Rocky Linux. C\u00e1ch th\u1ef1c hi\u1ec7n c\u01a1 b\u1ea3n l\u00e0 cho ph\u00e9p c\u00e1c c\u1ed5ng c\u1ea7n thi\u1ebft nh\u01b0 SSH, HTTP, HTTPS, thi\u1ebft l\u1eadp quy t\u1eafc ch\u1eb7n k\u1ebft n\u1ed1i kh\u00f4ng mong mu\u1ed1n, sau \u0111\u00f3 k\u00edch ho\u1ea1t t\u01b0\u1eddng l\u1eeda.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Vi\u1ec7c c\u1ea5u h\u00ecnh \u0111\u00fang gi\u00fap h\u1ea1n ch\u1ebf truy c\u1eadp tr\u00e1i ph\u00e9p v\u00e0 gi\u1ea3m nguy c\u01a1 m\u00e1y ch\u1ee7 b\u1ecb khai th\u00e1c qua nh\u1eefng d\u1ecbch v\u1ee5 kh\u00f4ng c\u1ea7n thi\u1ebft. Tuy nhi\u00ean, ch\u1ec9 m\u1ed9t thao t\u00e1c sai c\u0169ng c\u00f3 th\u1ec3 khi\u1ebfn b\u1ea1n m\u1ea5t k\u1ebft n\u1ed1i SSH. H\u00e3y c\u00f9ng Tino t\u00ecm hi\u1ec3u c\u00e1ch th\u1ef1c hi\u1ec7n ch\u00ednh x\u00e1c nh\u00e9!<\/strong><\/p>\n\n\n\n<h2 id=\"T\u01b0\u1eddng_l\u1eeda_VPS_l\u00e0_g\u00ec?_T\u1ea1i_sao_c\u1ea7n_c\u1ea5u_h\u00ecnh?\"><strong>T\u01b0\u1eddng l\u1eeda VPS l\u00e0 g\u00ec? T\u1ea1i sao c\u1ea7n c\u1ea5u h\u00ecnh?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>T\u01b0\u1eddng l\u1eeda VPS (VPS Firewall)<\/strong> l\u00e0 c\u01a1 ch\u1ebf b\u1ea3o m\u1eadt gi\u00fap ki\u1ec3m so\u00e1t l\u01b0u l\u01b0\u1ee3ng m\u1ea1ng \u0111i v\u00e0o v\u00e0 \u0111i ra kh\u1ecfi m\u00e1y ch\u1ee7 \u1ea3o d\u1ef1a tr\u00ean nh\u1eefng quy t\u1eafc \u0111\u01b0\u1ee3c thi\u1ebft l\u1eadp s\u1eb5n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n c\u00f3 th\u1ec3 h\u00ecnh dung t\u01b0\u1eddng l\u1eeda gi\u1ed1ng nh\u01b0 m\u1ed9t nh\u00e2n vi\u00ean b\u1ea3o v\u1ec7 t\u1ea1i c\u1ed5ng ra v\u00e0o c\u1ee7a m\u00e1y ch\u1ee7. Khi c\u00f3 y\u00eau c\u1ea7u k\u1ebft n\u1ed1i, h\u1ec7 th\u1ed1ng s\u1ebd ki\u1ec3m tra \u0111\u1ecba ch\u1ec9 IP, c\u1ed5ng k\u1ebft n\u1ed1i, giao th\u1ee9c v\u00e0 c\u00e1c \u0111i\u1ec1u ki\u1ec7n li\u00ean quan \u0111\u1ec3 quy\u1ebft \u0111\u1ecbnh cho ph\u00e9p hay t\u1eeb ch\u1ed1i l\u01b0u l\u01b0\u1ee3ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5, m\u1ed9t VPS \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 ch\u1ea1y website th\u01b0\u1eddng c\u1ea7n m\u1edf c\u1ed5ng 80 (HTTP) v\u00e0 443 (HTTPS). Trong khi \u0111\u00f3, c\u1ed5ng 22 (SSH) d\u00e0nh cho qu\u1ea3n tr\u1ecb m\u00e1y ch\u1ee7 n\u00ean \u0111\u01b0\u1ee3c gi\u1edbi h\u1ea1n quy\u1ec1n truy c\u1eadp khi c\u00f3 th\u1ec3.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-1-1024x549.png\" alt=\"T\u01b0\u1eddng l\u1eeda VPS l\u00e0 g\u00ec? T\u1ea1i sao c\u1ea7n c\u1ea5u h\u00ecnh?\" class=\"wp-image-132780\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-1-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-1-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-1-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-1-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-1-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>T\u01b0\u1eddng l\u1eeda VPS l\u00e0 g\u00ec? T\u1ea1i sao c\u1ea7n c\u1ea5u h\u00ecnh?<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Vi\u1ec7c c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda mang l\u1ea1i nh\u1eefng l\u1ee3i \u00edch ch\u00ednh:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>H\u1ea1n ch\u1ebf truy c\u1eadp tr\u00e1i ph\u00e9p:<\/strong> Ki\u1ec3m so\u00e1t nh\u1eefng k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c ph\u00e9p \u0111\u1ebfn c\u00e1c d\u1ecbch v\u1ee5 tr\u00ean VPS.<\/li>\n\n\n\n<li><strong>Gi\u1ea3m b\u1ec1 m\u1eb7t t\u1ea5n c\u00f4ng:<\/strong> \u0110\u00f3ng ho\u1eb7c h\u1ea1n ch\u1ebf truy c\u1eadp c\u00e1c c\u1ed5ng kh\u00f4ng c\u1ea7n thi\u1ebft.<\/li>\n\n\n\n<li><strong>B\u1ea3o v\u1ec7 d\u1ecbch v\u1ee5 n\u1ed9i b\u1ed9:<\/strong> Gi\u00fap h\u1ea1n ch\u1ebf truy c\u1eadp tr\u1ef1c ti\u1ebfp v\u00e0o database, b\u1ea3ng \u0111i\u1ec1u khi\u1ec3n qu\u1ea3n tr\u1ecb v\u00e0 \u1ee9ng d\u1ee5ng n\u1ed9i b\u1ed9.<\/li>\n\n\n\n<li><strong>Ki\u1ec3m so\u00e1t k\u1ebft n\u1ed1i:<\/strong> C\u00f3 th\u1ec3 thi\u1ebft l\u1eadp quy t\u1eafc theo IP, c\u1ed5ng v\u00e0 giao th\u1ee9c.<\/li>\n\n\n\n<li><strong>H\u1ed7 tr\u1ee3 qu\u1ea3n tr\u1ecb b\u1ea3o m\u1eadt:<\/strong> Gi\u00fap theo d\u00f5i, ki\u1ec3m tra v\u00e0 \u0111i\u1ec1u ch\u1ec9nh quy\u1ec1n truy c\u1eadp khi tri\u1ec3n khai d\u1ecbch v\u1ee5 m\u1edbi.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Tuy nhi\u00ean, c\u1ea7n l\u01b0u \u00fd r\u1eb1ng t\u01b0\u1eddng l\u1eeda kh\u00f4ng th\u1ec3 thay th\u1ebf vi\u1ec7c c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m, qu\u1ea3n l\u00fd m\u1eadt kh\u1ea9u, c\u1ea5u h\u00ecnh SSH an to\u00e0n ho\u1eb7c c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o m\u1eadt \u1ee9ng d\u1ee5ng.<\/em><\/p>\n\n\n\n<h2 id=\"N\u00ean_s\u1eed_d\u1ee5ng_c\u00f4ng_c\u1ee5_t\u01b0\u1eddng_l\u1eeda_n\u00e0o_cho_VPS?\"><strong>N\u00ean s\u1eed d\u1ee5ng c\u00f4ng c\u1ee5 t\u01b0\u1eddng l\u1eeda n\u00e0o cho VPS?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>UFW l\u00e0 l\u1ef1a ch\u1ecdn ph\u00f9 h\u1ee3p cho ng\u01b0\u1eddi m\u1edbi s\u1eed d\u1ee5ng VPS Ubuntu ho\u1eb7c Debian.<\/strong> \u0110\u1ed1i v\u1edbi AlmaLinux, Rocky Linux v\u00e0 c\u00e1c h\u1ec7 \u0111i\u1ec1u h\u00e0nh thu\u1ed9c h\u1ecd RHEL, firewalld th\u01b0\u1eddng \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 qu\u1ea3n l\u00fd quy t\u1eafc m\u1ea1ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">D\u01b0\u1edbi \u0111\u00e2y l\u00e0 b\u1ea3ng so s\u00e1nh nhanh:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>C\u00f4ng c\u1ee5<\/strong><\/td><td><strong>H\u1ec7 \u0111i\u1ec1u h\u00e0nh ph\u00f9 h\u1ee3p<\/strong><\/td><td><strong>\u0110\u1eb7c \u0111i\u1ec3m<\/strong><\/td><\/tr><tr><td><a href=\"https:\/\/wiki.ubuntu.com\/UFW\" target=\"_blank\" data-type=\"link\" data-id=\"https:\/\/wiki.ubuntu.com\/UFW\" rel=\"noreferrer noopener nofollow\">UFW<\/a><\/td><td>Ubuntu, Debian<\/td><td>C\u00fa ph\u00e1p \u0111\u01a1n gi\u1ea3n, d\u1ec5 qu\u1ea3n l\u00fd c\u1ed5ng v\u00e0 \u0111\u1ecba ch\u1ec9 IP<\/td><\/tr><tr><td><a href=\"https:\/\/firewalld.org\/\" target=\"_blank\" data-type=\"link\" data-id=\"https:\/\/firewalld.org\/\" rel=\"noreferrer noopener nofollow\">firewalld<\/a><\/td><td>AlmaLinux, Rocky Linux, RHEL, Fedora<\/td><td>Qu\u1ea3n l\u00fd theo zone, service v\u00e0 port<\/td><\/tr><tr><td>iptables\/nftables<\/td><td>Linux<\/td><td>H\u1ed7 tr\u1ee3 c\u1ea5u h\u00ecnh chuy\u00ean s\u00e2u, y\u00eau c\u1ea7u ki\u1ebfn th\u1ee9c m\u1ea1ng t\u1ed1t h\u01a1n<\/td><\/tr><tr><td>Windows Defender Firewall<\/td><td>Windows Server<\/td><td>Qu\u1ea3n l\u00fd qua giao di\u1ec7n ho\u1eb7c PowerShell<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Trong \u0111\u00f3:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>UFW (Uncomplicated Firewall):<\/strong> Cung c\u1ea5p giao di\u1ec7n d\u00f2ng l\u1ec7nh \u0111\u01a1n gi\u1ea3n \u0111\u1ec3 qu\u1ea3n l\u00fd nh\u1eefng quy t\u1eafc t\u01b0\u1eddng l\u1eeda tr\u00ean Linux.<\/li>\n\n\n\n<li><strong>firewalld:<\/strong> H\u1ed7 tr\u1ee3 qu\u1ea3n l\u00fd t\u01b0\u1eddng l\u1eeda theo v\u00f9ng m\u1ea1ng (zone), cho ph\u00e9p \u00e1p d\u1ee5ng ch\u00ednh s\u00e1ch kh\u00e1c nhau cho t\u1eebng nh\u00f3m k\u1ebft n\u1ed1i.<\/li>\n\n\n\n<li><strong>iptables\/nftables:<\/strong> L\u00e0 nh\u1eefng c\u00f4ng c\u1ee5 qu\u1ea3n l\u00fd c\u01a1 ch\u1ebf l\u1ecdc g\u00f3i tin tr\u00ean Linux, ph\u00f9 h\u1ee3p h\u01a1n v\u1edbi ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb c\u00f3 kinh nghi\u1ec7m.<\/li>\n\n\n\n<li><strong>Windows Defender Firewall:<\/strong> L\u00e0 th\u00e0nh ph\u1ea7n t\u01b0\u1eddng l\u1eeda t\u00edch h\u1ee3p trong Windows Server.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Trong ph\u1ea1m vi b\u00e0i vi\u1ebft, ch\u00fang ta s\u1ebd \u01b0u ti\u00ean h\u01b0\u1edbng d\u1eabn UFW tr\u00ean Ubuntu\/Debian, sau \u0111\u00f3 gi\u1edbi thi\u1ec7u c\u00e1ch th\u1ef1c hi\u1ec7n t\u01b0\u01a1ng \u1ee9ng tr\u00ean AlmaLinux\/Rocky Linux v\u00e0 Windows Server.<\/p>\n\n\n\n<h2 id=\"C\u1ea7n_chu\u1ea9n_b\u1ecb_g\u00ec_tr\u01b0\u1edbc_khi_c\u1ea5u_h\u00ecnh_t\u01b0\u1eddng_l\u1eeda_VPS?\"><strong>C\u1ea7n chu\u1ea9n b\u1ecb g\u00ec tr\u01b0\u1edbc khi c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda VPS?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u01b0\u1edbc khi b\u1eaft \u0111\u1ea7u, b\u1ea1n c\u1ea7n \u0111\u1ea3m b\u1ea3o c\u00f3 quy\u1ec1n qu\u1ea3n tr\u1ecb m\u00e1y ch\u1ee7 v\u00e0 x\u00e1c \u0111\u1ecbnh ch\u00ednh x\u00e1c c\u00e1c c\u1ed5ng \u0111ang \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u1eefng y\u00eau c\u1ea7u c\u01a1 b\u1ea3n g\u1ed3m:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>VPS \u0111ang ho\u1ea1t \u0111\u1ed9ng v\u00e0 c\u00f3 th\u1ec3 k\u1ebft n\u1ed1i t\u1eeb xa.<\/li>\n\n\n\n<li>T\u00e0i kho\u1ea3n root ho\u1eb7c t\u00e0i kho\u1ea3n c\u00f3 quy\u1ec1n sudo tr\u00ean Linux.<\/li>\n\n\n\n<li>C\u00f4ng c\u1ee5 SSH nh\u01b0 Xshell, PuTTY ho\u1eb7c Terminal \u0111\u1ec3 truy c\u1eadp VPS Linux.<\/li>\n\n\n\n<li>X\u00e1c \u0111\u1ecbnh c\u1ed5ng SSH hi\u1ec7n t\u1ea1i, m\u1eb7c \u0111\u1ecbnh th\u01b0\u1eddng l\u00e0 22.<\/li>\n\n\n\n<li>Bi\u1ebft nh\u1eefng d\u1ecbch v\u1ee5 c\u1ea7n truy c\u1eadp t\u1eeb Internet.<\/li>\n\n\n\n<li>C\u00f3 ph\u01b0\u01a1ng \u00e1n truy c\u1eadp m\u00e1y ch\u1ee7 qua Console ho\u1eb7c Rescue Mode c\u1ee7a nh\u00e0 cung c\u1ea5p n\u1ebfu x\u1ea3y ra s\u1ef1 c\u1ed1.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-2-1024x549.png\" alt=\"C\u1ea7n chu\u1ea9n b\u1ecb g\u00ec tr\u01b0\u1edbc khi c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda VPS?\" class=\"wp-image-132781\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-2-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-2-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-2-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-2-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-2-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>C\u1ea7n chu\u1ea9n b\u1ecb g\u00ec tr\u01b0\u1edbc khi c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda VPS?<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><strong>L\u01b0u \u00fd quan tr\u1ecdng:<\/strong>&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Kh\u00f4ng k\u00edch ho\u1ea1t ch\u00ednh s\u00e1ch ch\u1eb7n k\u1ebft n\u1ed1i tr\u01b0\u1edbc khi cho ph\u00e9p c\u1ed5ng SSH \u0111ang s\u1eed d\u1ee5ng. N\u1ebfu c\u1ea5u h\u00ecnh sai, b\u1ea1n c\u00f3 th\u1ec3 m\u1ea5t quy\u1ec1n truy c\u1eadp VPS t\u1eeb xa.<\/li>\n\n\n\n<li>\u0110\u1ed1i v\u1edbi VPS \u0111ang v\u1eadn h\u00e0nh website ho\u1eb7c \u1ee9ng d\u1ee5ng quan tr\u1ecdng, n\u00ean sao l\u01b0u c\u1ea5u h\u00ecnh v\u00e0 th\u1ef1c hi\u1ec7n trong th\u1eddi gian b\u1ea3o tr\u00ec ph\u00f9 h\u1ee3p.<\/li>\n<\/ul>\n\n\n\n<h2 id=\"H\u01b0\u1edbng_d\u1eabn_c\u1ea5u_h\u00ecnh_t\u01b0\u1eddng_l\u1eeda_cho_VPS_Ubuntu\/Debian_b\u1eb1ng_UFW\"><strong>H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS Ubuntu\/Debian b\u1eb1ng UFW<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 c\u1ea5u h\u00ecnh Firewall tr\u00ean Ubuntu ho\u1eb7c Debian, b\u1ea1n ch\u1ec9 c\u1ea7n c\u00e0i \u0111\u1eb7t UFW, m\u1edf c\u1ed5ng SSH v\u00e0 nh\u1eefng c\u1ed5ng d\u1ecbch v\u1ee5 c\u1ea7n thi\u1ebft, thi\u1ebft l\u1eadp ch\u00ednh s\u00e1ch m\u1eb7c \u0111\u1ecbnh, sau \u0111\u00f3 b\u1eadt t\u01b0\u1eddng l\u1eeda.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c b\u01b0\u1edbc sau \u00e1p d\u1ee5ng cho VPS Linux s\u1eed d\u1ee5ng tr\u00ecnh qu\u1ea3n l\u00fd g\u00f3i APT.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_1:_K\u1ebft_n\u1ed1i_SSH_v\u00e0_ki\u1ec3m_tra_tr\u1ea1ng_th\u00e1i_t\u01b0\u1eddng_l\u1eeda\"><strong>B\u01b0\u1edbc 1: K\u1ebft n\u1ed1i SSH v\u00e0 ki\u1ec3m tra tr\u1ea1ng th\u00e1i t\u01b0\u1eddng l\u1eeda<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u01b0\u1edbc ti\u00ean, m\u1edf Xshell, PuTTY ho\u1eb7c Terminal tr\u00ean m\u00e1y t\u00ednh v\u00e0 \u0111\u0103ng nh\u1eadp v\u00e0o VPS b\u1eb1ng \u0111\u1ecba ch\u1ec9 IP, t\u00e0i kho\u1ea3n qu\u1ea3n tr\u1ecb v\u00e0 th\u00f4ng tin x\u00e1c th\u1ef1c \u0111\u01b0\u1ee3c cung c\u1ea5p.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi k\u1ebft n\u1ed1i th\u00e0nh c\u00f4ng, nh\u1eadp l\u1ec7nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw status verbose<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu m\u00e0n h\u00ecnh hi\u1ec3n th\u1ecb:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Status: inactive<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110i\u1ec1u n\u00e0y c\u00f3 ngh\u0129a UFW hi\u1ec7n ch\u01b0a \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu xu\u1ea5t hi\u1ec7n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Status: active<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">UFW \u0111ang ho\u1ea1t \u0111\u1ed9ng. B\u1ea1n c\u1ea7n ki\u1ec3m tra nh\u1eefng quy t\u1eafc hi\u1ec7n t\u1ea1i tr\u01b0\u1edbc khi thay \u0111\u1ed5i \u0111\u1ec3 tr\u00e1nh \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn c\u00e1c d\u1ecbch v\u1ee5 \u0111ang ch\u1ea1y.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u01b0\u1eddng h\u1ee3p h\u1ec7 th\u1ed1ng b\u00e1o ufw: command not found, b\u1ea1n c\u1ea7n c\u00e0i \u0111\u1eb7t c\u00f4ng c\u1ee5 \u1edf b\u01b0\u1edbc ti\u1ebfp theo.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ti\u1ebfp theo, ki\u1ec3m tra c\u00e1c c\u1ed5ng TCP \u0111ang l\u1eafng nghe tr\u00ean VPS:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ss -lntp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Trong k\u1ebft qu\u1ea3, h\u00e3y x\u00e1c \u0111\u1ecbnh c\u1ed5ng SSH \u0111ang \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng, ch\u1eb3ng h\u1ea1n <strong>:22<\/strong> ho\u1eb7c <strong>:2222<\/strong>.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-3-1024x549.png\" alt=\"\" class=\"wp-image-132783\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-3-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-3-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-3-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-3-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-3-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>K\u1ebft n\u1ed1i SSH v\u00e0 ki\u1ec3m tra tr\u1ea1ng th\u00e1i t\u01b0\u1eddng l\u1eeda<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">C\u1ea7n \u0111\u1ed1i chi\u1ebfu th\u00eam v\u1edbi c\u1ed5ng \u0111ang s\u1eed d\u1ee5ng trong \u1ee9ng d\u1ee5ng SSH. N\u1ebfu c\u1ed5ng qu\u1ea3n tr\u1ecb kh\u00f4ng ph\u1ea3i 22, c\u00e1c l\u1ec7nh \u1edf nh\u1eefng b\u01b0\u1edbc ti\u1ebfp theo ph\u1ea3i \u0111\u01b0\u1ee3c \u0111i\u1ec1u ch\u1ec9nh t\u01b0\u01a1ng \u1ee9ng.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_2:_C\u00e0i_\u0111\u1eb7t_UFW_tr\u00ean_VPS\"><strong>B\u01b0\u1edbc 2: C\u00e0i \u0111\u1eb7t UFW tr\u00ean VPS<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu VPS ch\u01b0a \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t UFW, h\u00e3y c\u1eadp nh\u1eadt danh s\u00e1ch g\u00f3i ph\u1ea7n m\u1ec1m:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3, ti\u1ebfn h\u00e0nh c\u00e0i \u0111\u1eb7t:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install ufw -y<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Khi qu\u00e1 tr\u00ecnh c\u00e0i \u0111\u1eb7t ho\u00e0n t\u1ea5t, ki\u1ec3m tra l\u1ea1i:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw status<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu UFW \u0111\u00e3 \u0111\u01b0\u1ee3c c\u00e0i \u0111\u1eb7t th\u00e0nh c\u00f4ng, l\u1ec7nh s\u1ebd hi\u1ec3n th\u1ecb tr\u1ea1ng th\u00e1i hi\u1ec7n t\u1ea1i c\u1ee7a t\u01b0\u1eddng l\u1eeda.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n ch\u01b0a c\u1ea7n k\u00edch ho\u1ea1t UFW \u1edf b\u01b0\u1edbc n\u00e0y.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-4-1024x549.png\" alt=\"C\u00e0i \u0111\u1eb7t UFW tr\u00ean VPS\" class=\"wp-image-132784\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-4-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-4-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-4-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-4-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-4-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>C\u00e0i \u0111\u1eb7t UFW tr\u00ean VPS<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h3 id=\"B\u01b0\u1edbc_3:_Cho_ph\u00e9p_k\u1ebft_n\u1ed1i_SSH\"><strong>B\u01b0\u1edbc 3: Cho ph\u00e9p k\u1ebft n\u1ed1i SSH<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u01b0\u1edbc khi b\u1eadt t\u01b0\u1eddng l\u1eeda, c\u1ea7n cho ph\u00e9p k\u1ebft n\u1ed1i \u0111\u1ebfn \u0111\u00fang c\u1ed5ng SSH \u0111ang s\u1eed d\u1ee5ng. N\u1ebfu VPS d\u00f9ng c\u1ed5ng SSH m\u1eb7c \u0111\u1ecbnh l\u00e0 22, nh\u1eadp l\u1ec7nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow 22\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Trong \u0111\u00f3:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>allow<\/strong><strong>:<\/strong> Cho ph\u00e9p k\u1ebft n\u1ed1i.<\/li>\n\n\n\n<li><strong>22<\/strong><strong>:<\/strong> S\u1ed1 c\u1ed5ng SSH.<\/li>\n\n\n\n<li><strong>tcp<\/strong><strong>:<\/strong> Giao th\u1ee9c k\u1ebft n\u1ed1i.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-5-1024x549.png\" alt=\"Cho ph\u00e9p k\u1ebft n\u1ed1i SSH\" class=\"wp-image-132785\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-5-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-5-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-5-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-5-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-5-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong><strong>Cho ph\u00e9p k\u1ebft n\u1ed1i SSH<\/strong><\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu tr\u01b0\u1edbc \u0111\u00f3 b\u1ea1n \u0111\u00e3 chuy\u1ec3n SSH sang c\u1ed5ng 2222, s\u1eed d\u1ee5ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow 2222\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>L\u01b0u \u00fd:<\/strong> C\u1ed5ng 2222 ch\u1ec9 l\u00e0 v\u00ed d\u1ee5. Kh\u00f4ng ch\u1ea1y l\u1ec7nh m\u1edf c\u1ed5ng 2222 n\u1ebfu m\u00e1y ch\u1ee7 \u0111ang s\u1eed d\u1ee5ng c\u1ed5ng kh\u00e1c.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi th\u00eam quy t\u1eafc, c\u00f3 th\u1ec3 ki\u1ec3m tra b\u1eb1ng l\u1ec7nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw show added<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">L\u1ec7nh s\u1ebd li\u1ec7t k\u00ea nh\u1eefng quy t\u1eafc \u0111\u00e3 \u0111\u01b0\u1ee3c th\u00eam th\u00f4ng qua giao di\u1ec7n UFW, k\u1ec3 c\u1ea3 khi t\u01b0\u1eddng l\u1eeda ch\u01b0a \u0111\u01b0\u1ee3c b\u1eadt.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_4:_Thi\u1ebft_l\u1eadp_ch\u00ednh_s\u00e1ch_t\u01b0\u1eddng_l\u1eeda_m\u1eb7c_\u0111\u1ecbnh\"><strong>B\u01b0\u1edbc 4: Thi\u1ebft l\u1eadp ch\u00ednh s\u00e1ch t\u01b0\u1eddng l\u1eeda m\u1eb7c \u0111\u1ecbnh<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi cho ph\u00e9p SSH, b\u1ea1n c\u00f3 th\u1ec3 thi\u1ebft l\u1eadp ch\u00ednh s\u00e1ch m\u1eb7c \u0111\u1ecbnh \u0111\u1ec3 t\u1eeb ch\u1ed1i k\u1ebft n\u1ed1i \u0111\u1ebfn kh\u00f4ng \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u1eadp l\u1ec7nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw default deny incoming<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">L\u1ec7nh tr\u00ean thi\u1ebft l\u1eadp ch\u00ednh s\u00e1ch t\u1eeb ch\u1ed1i nh\u1eefng k\u1ebft n\u1ed1i m\u1edbi \u0111i v\u00e0o VPS n\u1ebfu kh\u00f4ng c\u00f3 quy t\u1eafc cho ph\u00e9p ph\u00f9 h\u1ee3p.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ti\u1ebfp theo, cho ph\u00e9p l\u01b0u l\u01b0\u1ee3ng \u0111i ra ngo\u00e0i:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw default allow outgoing<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1ch c\u1ea5u h\u00ecnh n\u00e0y ph\u00f9 h\u1ee3p v\u1edbi nhi\u1ec1u VPS ch\u1ea1y website ho\u1eb7c \u1ee9ng d\u1ee5ng th\u00f4ng th\u01b0\u1eddng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5, m\u00e1y ch\u1ee7 v\u1eabn c\u00f3 th\u1ec3 k\u1ebft n\u1ed1i \u0111\u1ebfn kho ph\u1ea7n m\u1ec1m \u0111\u1ec3 t\u1ea3i b\u1ea3n c\u1eadp nh\u1eadt, trong khi nh\u1eefng k\u1ebft n\u1ed1i m\u1edbi t\u1eeb Internet v\u00e0o c\u00e1c c\u1ed5ng kh\u00f4ng \u0111\u01b0\u1ee3c cho ph\u00e9p s\u1ebd b\u1ecb h\u1ea1n ch\u1ebf.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-6-1024x549.png\" alt=\"Thi\u1ebft l\u1eadp ch\u00ednh s\u00e1ch t\u01b0\u1eddng l\u1eeda m\u1eb7c \u0111\u1ecbnh\" class=\"wp-image-132786\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-6-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-6-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-6-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-6-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-6-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong><strong>Thi\u1ebft l\u1eadp ch\u00ednh s\u00e1ch t\u01b0\u1eddng l\u1eeda m\u1eb7c \u0111\u1ecbnh<\/strong><\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">L\u01b0u \u00fd r\u1eb1ng \u0111\u00e2y l\u00e0 ch\u00ednh s\u00e1ch c\u01a1 b\u1ea3n, ch\u01b0a ph\u1ea3i c\u1ea5u h\u00ecnh h\u1ea1n ch\u1ebf t\u1ea5t c\u1ea3 l\u01b0u l\u01b0\u1ee3ng \u0111i ra ngo\u00e0i. N\u1ebfu VPS \u0111ang c\u00f3 UFW ho\u1ea1t \u0111\u1ed9ng, c\u1ea7n ki\u1ec3m tra \u0111\u1ea7y \u0111\u1ee7 c\u00e1c quy t\u1eafc tr\u01b0\u1edbc khi thay \u0111\u1ed5i ch\u00ednh s\u00e1ch m\u1eb7c \u0111\u1ecbnh.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_5:_M\u1edf_c\u00e1c_c\u1ed5ng_d\u1ecbch_v\u1ee5_c\u1ea7n_thi\u1ebft\"><strong>B\u01b0\u1edbc 5: M\u1edf c\u00e1c c\u1ed5ng d\u1ecbch v\u1ee5 c\u1ea7n thi\u1ebft<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu VPS \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 ch\u1ea1y website, b\u1ea1n c\u1ea7n cho ph\u00e9p truy c\u1eadp HTTP v\u00e0 HTTPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1edf c\u1ed5ng HTTP:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow 80\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1edf c\u1ed5ng HTTPS:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow 443\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu tri\u1ec3n khai m\u1ed9t \u1ee9ng d\u1ee5ng ch\u1ea1y tr\u1ef1c ti\u1ebfp tr\u00ean c\u1ed5ng 8080 v\u00e0 th\u1ef1c s\u1ef1 c\u1ea7n truy c\u1eadp t\u1eeb b\u00ean ngo\u00e0i, c\u00f3 th\u1ec3 m\u1edf th\u00eam:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow 8080\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng c\u1ea7n m\u1edf c\u1ed5ng 8080 n\u1ebfu d\u1ecbch v\u1ee5 ch\u1ec9 s\u1eed d\u1ee5ng n\u1ed9i b\u1ed9 ho\u1eb7c truy c\u1eadp th\u00f4ng qua Reverse Proxy.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-7-1024x549.png\" alt=\" M\u1edf c\u00e1c c\u1ed5ng d\u1ecbch v\u1ee5 c\u1ea7n thi\u1ebft\" class=\"wp-image-132788\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-7-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-7-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-7-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-7-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-7-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>M\u1edf c\u00e1c c\u1ed5ng d\u1ecbch v\u1ee5 c\u1ea7n thi\u1ebft<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">D\u01b0\u1edbi \u0111\u00e2y l\u00e0 b\u1ea3ng tham kh\u1ea3o nh\u1eefng c\u1ed5ng th\u01b0\u1eddng g\u1eb7p:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>D\u1ecbch v\u1ee5<\/strong><\/td><td><strong>C\u1ed5ng m\u1eb7c \u0111\u1ecbnh\/th\u01b0\u1eddng d\u00f9ng<\/strong><\/td><td><strong>Khuy\u1ebfn ngh\u1ecb<\/strong><\/td><\/tr><tr><td>SSH<\/td><td>22\/TCP<\/td><td>Cho ph\u00e9p, \u01b0u ti\u00ean gi\u1edbi h\u1ea1n IP qu\u1ea3n tr\u1ecb<\/td><\/tr><tr><td>HTTP<\/td><td>80\/TCP<\/td><td>M\u1edf khi cung c\u1ea5p website HTTP ho\u1eb7c chuy\u1ec3n h\u01b0\u1edbng sang HTTPS<\/td><\/tr><tr><td>HTTPS<\/td><td>443\/TCP<\/td><td>M\u1edf khi cung c\u1ea5p website HTTPS<\/td><\/tr><tr><td>MySQL<\/td><td>3306\/TCP<\/td><td>Kh\u00f4ng m\u1edf c\u00f4ng khai n\u1ebfu kh\u00f4ng c\u1ea7n thi\u1ebft<\/td><\/tr><tr><td>PostgreSQL<\/td><td>5432\/TCP<\/td><td>\u01afu ti\u00ean k\u1ebft n\u1ed1i n\u1ed9i b\u1ed9<\/td><\/tr><tr><td>Redis<\/td><td>6379\/TCP<\/td><td>Kh\u00f4ng c\u00f4ng khai tr\u1ef1c ti\u1ebfp l\u00ean Internet<\/td><\/tr><tr><td>\u1ee8ng d\u1ee5ng web t\u00f9y ch\u1ec9nh<\/td><td>8080\/TCP ho\u1eb7c c\u1ed5ng kh\u00e1c<\/td><td>Ch\u1ec9 m\u1edf khi th\u1ef1c s\u1ef1 c\u1ea7n truy c\u1eadp t\u1eeb b\u00ean ngo\u00e0i<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1c c\u1ed5ng trong b\u1ea3ng l\u00e0 gi\u00e1 tr\u1ecb ph\u1ed5 bi\u1ebfn, kh\u00f4ng ph\u1ea3i c\u1ea5u h\u00ecnh b\u1eaft bu\u1ed9c c\u1ee7a m\u1ecdi \u1ee9ng d\u1ee5ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Nguy\u00ean t\u1eafc n\u00ean \u00e1p d\u1ee5ng:<\/strong> Ch\u1ec9 cho ph\u00e9p nh\u1eefng c\u1ed5ng th\u1ef1c s\u1ef1 c\u1ea7n thi\u1ebft cho ho\u1ea1t \u0111\u1ed9ng c\u1ee7a VPS.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_6:_K\u00edch_ho\u1ea1t_t\u01b0\u1eddng_l\u1eeda_UFW\"><strong>B\u01b0\u1edbc 6: K\u00edch ho\u1ea1t t\u01b0\u1eddng l\u1eeda UFW<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi \u0111\u00e3 cho ph\u00e9p SSH v\u00e0 c\u00e1c d\u1ecbch v\u1ee5 c\u1ea7n thi\u1ebft, b\u1ea1n c\u00f3 th\u1ec3 k\u00edch ho\u1ea1t UFW:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw enable<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu \u0111ang truy c\u1eadp qua SSH, h\u1ec7 th\u1ed1ng c\u00f3 th\u1ec3 hi\u1ec3n th\u1ecb th\u00f4ng b\u00e1o:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Command may disrupt existing ssh connections. Proceed with operation (y|n)?<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">H\u00e3y x\u00e1c nh\u1eadn r\u1eb1ng c\u1ed5ng SSH \u0111\u00e3 \u0111\u01b0\u1ee3c cho ph\u00e9p, sau \u0111\u00f3 nh\u1eadp <strong>y<\/strong> xong nh\u1ea5n <strong>Enter<\/strong> \u0111\u1ec3 ti\u1ebfp t\u1ee5c.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-8-1024x549.png\" alt=\"K\u00edch ho\u1ea1t t\u01b0\u1eddng l\u1eeda UFW\" class=\"wp-image-132789\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-8-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-8-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-8-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-8-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-8-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>K\u00edch ho\u1ea1t t\u01b0\u1eddng l\u1eeda UFW<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Khi k\u00edch ho\u1ea1t th\u00e0nh c\u00f4ng, b\u1ea1n c\u00f3 th\u1ec3 nh\u1eadn \u0111\u01b0\u1ee3c th\u00f4ng b\u00e1o cho bi\u1ebft t\u01b0\u1eddng l\u1eeda \u0111ang ho\u1ea1t \u0111\u1ed9ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Quan tr\u1ecdng:<\/strong> Gi\u1eef nguy\u00ean phi\u00ean SSH hi\u1ec7n t\u1ea1i v\u00e0 th\u1eed m\u1edf m\u1ed9t phi\u00ean SSH m\u1edbi t\u1eeb m\u00e1y t\u00ednh. Ch\u1ec9 \u0111\u00f3ng phi\u00ean c\u0169 khi \u0111\u00e3 ch\u1eafc ch\u1eafn phi\u00ean m\u1edbi k\u1ebft n\u1ed1i th\u00e0nh c\u00f4ng.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_7:_Ki\u1ec3m_tra_v\u00e0_x\u00e1c_nh\u1eadn_c\u1ea5u_h\u00ecnh\"><strong>B\u01b0\u1edbc 7: Ki\u1ec3m tra v\u00e0 x\u00e1c nh\u1eadn c\u1ea5u h\u00ecnh<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi k\u00edch ho\u1ea1t, ki\u1ec3m tra tr\u1ea1ng th\u00e1i UFW:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw status verbose<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">V\u1edbi m\u1ed9t VPS ch\u1ea1y website th\u00f4ng th\u01b0\u1eddng, k\u1ebft qu\u1ea3 tham kh\u1ea3o c\u00f3 th\u1ec3 hi\u1ec3n th\u1ecb nh\u01b0 sau:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Status: active\n\nLogging: on (low)\n\nDefault: deny (incoming), allow (outgoing), disabled (routed)\n\nTo &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Action&nbsp; &nbsp; &nbsp; From\n\n-- &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ------&nbsp; &nbsp; &nbsp; ----\n\n22\/tcp &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ALLOW IN&nbsp; &nbsp; Anywhere\n\n80\/tcp &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ALLOW IN&nbsp; &nbsp; Anywhere\n\n443\/tcp&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; ALLOW IN&nbsp; &nbsp; Anywhere<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u00e2y ch\u1ec9 l\u00e0 v\u00ed d\u1ee5 minh h\u1ecda. K\u1ebft qu\u1ea3 th\u1ef1c t\u1ebf c\u00f3 th\u1ec3 kh\u00e1c t\u00f9y phi\u00ean b\u1ea3n, ch\u1ebf \u0111\u1ed9 ghi nh\u1eadt k\u00fd v\u00e0 c\u1ea5u h\u00ecnh IPv6.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-9-1024x549.png\" alt=\"Ki\u1ec3m tra v\u00e0 x\u00e1c nh\u1eadn c\u1ea5u h\u00ecnh\" class=\"wp-image-132790\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-9-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-9-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-9-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-9-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-9-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra v\u00e0 x\u00e1c nh\u1eadn c\u1ea5u h\u00ecnh<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n c\u1ea7n ki\u1ec3m tra ba th\u00f4ng tin quan tr\u1ecdng:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Status: active: <\/strong>UFW \u0111ang \u0111\u01b0\u1ee3c k\u00edch ho\u1ea1t.<\/li>\n\n\n\n<li><strong>deny (incoming):<\/strong> Ch\u00ednh s\u00e1ch m\u1eb7c \u0111\u1ecbnh \u0111\u1ed1i v\u1edbi k\u1ebft n\u1ed1i \u0111i v\u00e0o.<\/li>\n\n\n\n<li>Nh\u1eefng c\u1ed5ng SSH v\u00e0 d\u1ecbch v\u1ee5 c\u1ea7n thi\u1ebft xu\u1ea5t hi\u1ec7n trong danh s\u00e1ch cho ph\u00e9p.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Cu\u1ed1i c\u00f9ng, ki\u1ec3m tra l\u1ea1i k\u1ebft n\u1ed1i SSH v\u00e0 truy c\u1eadp website t\u1eeb m\u1ed9t thi\u1ebft b\u1ecb b\u00ean ngo\u00e0i VPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu SSH ho\u1ea1t \u0111\u1ed9ng b\u00ecnh th\u01b0\u1eddng, website truy c\u1eadp \u0111\u01b0\u1ee3c v\u00e0 nh\u1eefng c\u1ed5ng kh\u00f4ng c\u1ea7n thi\u1ebft kh\u00f4ng c\u00f2n \u0111\u01b0\u1ee3c ph\u00e9p truy c\u1eadp, c\u1ea5u h\u00ecnh c\u01a1 b\u1ea3n \u0111\u00e3 \u0111\u00e1p \u1ee9ng m\u1ee5c ti\u00eau \u0111\u1ec1 ra.<\/p>\n\n\n\n<h2 id=\"C\u00e1ch_qu\u1ea3n_l\u00fd_c\u00e1c_quy_t\u1eafc_t\u01b0\u1eddng_l\u1eeda_UFW\"><strong>C\u00e1ch qu\u1ea3n l\u00fd c\u00e1c quy t\u1eafc t\u01b0\u1eddng l\u1eeda UFW<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi k\u00edch ho\u1ea1t UFW, b\u1ea1n c\u00f3 th\u1ec3 b\u1ed5 sung, ch\u1ec9nh s\u1eeda ho\u1eb7c x\u00f3a nh\u1eefng quy t\u1eafc theo nhu c\u1ea7u th\u1ef1c t\u1ebf m\u00e0 kh\u00f4ng c\u1ea7n c\u00e0i \u0111\u1eb7t l\u1ea1i t\u01b0\u1eddng l\u1eeda.<\/p>\n\n\n\n<h3 id=\"Cho_ph\u00e9p_truy_c\u1eadp_t\u1eeb_m\u1ed9t_\u0111\u1ecba_ch\u1ec9_IP_c\u1ee5_th\u1ec3\"><strong>Cho ph\u00e9p truy c\u1eadp t\u1eeb m\u1ed9t \u0111\u1ecba ch\u1ec9 IP c\u1ee5 th\u1ec3<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu ch\u1ec9 mu\u1ed1n m\u1ed9t m\u00e1y t\u00ednh c\u00f3 quy\u1ec1n SSH v\u00e0o VPS, b\u1ea1n c\u00f3 th\u1ec3 gi\u1edbi h\u1ea1n k\u1ebft n\u1ed1i d\u1ef1a tr\u00ean \u0111\u1ecba ch\u1ec9 IP ngu\u1ed3n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5, cho ph\u00e9p \u0111\u1ecba ch\u1ec9 IP 203.0.113.10 truy c\u1eadp c\u1ed5ng SSH 22:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow from 203.0.113.10 to any port 22 proto tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>L\u01b0u \u00fd:<\/strong> 203.0.113.10 l\u00e0 \u0111\u1ecba ch\u1ec9 IP minh h\u1ecda. C\u1ea7n thay b\u1eb1ng \u0111\u1ecba ch\u1ec9 IP public th\u1ef1c t\u1ebf c\u1ee7a m\u00e1y t\u00ednh ho\u1eb7c m\u1ea1ng qu\u1ea3n tr\u1ecb.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-10-1024x549.png\" alt=\"Cho ph\u00e9p truy c\u1eadp t\u1eeb m\u1ed9t \u0111\u1ecba ch\u1ec9 IP c\u1ee5 th\u1ec3\" class=\"wp-image-132791\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-10-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-10-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-10-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-10-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-10-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Cho ph\u00e9p truy c\u1eadp t\u1eeb m\u1ed9t \u0111\u1ecba ch\u1ec9 IP c\u1ee5 th\u1ec3<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu \u0111\u00e3 t\u1ed3n t\u1ea1i quy t\u1eafc cho ph\u00e9p m\u1ecdi \u0111\u1ecba ch\u1ec9 IP truy c\u1eadp SSH, b\u1ea1n c\u1ea7n ki\u1ec3m tra v\u00e0 x\u00f3a quy t\u1eafc r\u1ed9ng h\u01a1n sau khi x\u00e1c nh\u1eadn quy t\u1eafc gi\u1edbi h\u1ea1n IP ho\u1ea1t \u0111\u1ed9ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5, n\u1ebfu tr\u01b0\u1edbc \u0111\u00f3 \u0111\u00e3 t\u1ea1o quy t\u1eafc allow 22\/tcp, c\u00f3 th\u1ec3 x\u00f3a b\u1eb1ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw delete allow 22\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u01b0\u1edbc khi x\u00f3a, h\u00e3y th\u1eed k\u1ebft n\u1ed1i SSH b\u1eb1ng m\u1ed9t phi\u00ean m\u1edbi t\u1eeb IP \u0111\u01b0\u1ee3c c\u1ea5p quy\u1ec1n.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-11-1024x549.png\" alt=\"X\u00f3a quy t\u1eafc\" class=\"wp-image-132792\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-11-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-11-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-11-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-11-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-11-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>X\u00f3a quy t\u1eafc<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><strong>Ch\u00fa \u00fd:<\/strong> N\u1ebfu \u0111ang s\u1eed d\u1ee5ng Internet c\u00f3 IP public thay \u0111\u1ed5i th\u01b0\u1eddng xuy\u00ean, vi\u1ec7c gi\u1edbi h\u1ea1n m\u1ed9t IP c\u1ed1 \u0111\u1ecbnh c\u00f3 th\u1ec3 khi\u1ebfn b\u1ea1n kh\u00f4ng th\u1ec3 truy c\u1eadp VPS sau khi \u0111\u1ecba ch\u1ec9 IP thay \u0111\u1ed5i.<\/p>\n\n\n\n<h3 id=\"Ch\u1eb7n_\u0111\u1ecba_ch\u1ec9_IP_v\u00e0_c\u1ed5ng_kh\u00f4ng_mong_mu\u1ed1n\"><strong>Ch\u1eb7n \u0111\u1ecba ch\u1ec9 IP v\u00e0 c\u1ed5ng kh\u00f4ng mong mu\u1ed1n<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Khi ph\u00e1t hi\u1ec7n m\u1ed9t \u0111\u1ecba ch\u1ec9 IP kh\u00f4ng mong mu\u1ed1n li\u00ean t\u1ee5c truy c\u1eadp VPS, b\u1ea1n c\u00f3 th\u1ec3 th\u00eam quy t\u1eafc t\u1eeb ch\u1ed1i. V\u00ed d\u1ee5:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw insert 1 deny from 198.51.100.25<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">L\u1ec7nh tr\u00ean th\u00eam quy t\u1eafc ch\u1eb7n \u0111\u1ecba ch\u1ec9 IP minh h\u1ecda 198.51.100.25 \u1edf \u0111\u1ea7u danh s\u00e1ch quy t\u1eafc ng\u01b0\u1eddi d\u00f9ng, gi\u00fap \u01b0u ti\u00ean ki\u1ec3m tra quy t\u1eafc n\u00e0y tr\u01b0\u1edbc c\u00e1c quy t\u1eafc cho ph\u00e9p th\u00f4ng th\u01b0\u1eddng \u0111\u01b0\u1ee3c th\u00eam sau.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u1ea7n thay \u0111\u1ecba ch\u1ec9 v\u00ed d\u1ee5 b\u1eb1ng IP th\u1ef1c t\u1ebf v\u00e0 \u0111\u1ea3m b\u1ea3o kh\u00f4ng ch\u1eb7n nh\u1ea7m IP qu\u1ea3n tr\u1ecb ho\u1eb7c h\u1ec7 th\u1ed1ng gi\u00e1m s\u00e1t h\u1ee3p l\u1ec7.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img decoding=\"async\" width=\"2800\" height=\"1500\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-12.png\" alt=\"Ch\u1eb7n \u0111\u1ecba ch\u1ec9 IP v\u00e0 c\u1ed5ng kh\u00f4ng mong mu\u1ed1n\" class=\"wp-image-132793\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-12.png 2800w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-12-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-12-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-12-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-12-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-12-2048x1097.png 2048w\" sizes=\"(max-width: 2800px) 100vw, 2800px\" \/><figcaption class=\"wp-element-caption\"><strong>Ch\u1eb7n \u0111\u1ecba ch\u1ec9 IP v\u00e0 c\u1ed5ng kh\u00f4ng mong mu\u1ed1n<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ed1i v\u1edbi c\u1ed5ng kh\u00f4ng c\u1ea7n s\u1eed d\u1ee5ng, b\u1ea1n c\u00f3 th\u1ec3 thi\u1ebft l\u1eadp quy t\u1eafc t\u1eeb ch\u1ed1i, ch\u1eb3ng h\u1ea1n:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw deny 3306\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Tuy nhi\u00ean, n\u1ebfu ch\u00ednh s\u00e1ch m\u1eb7c \u0111\u1ecbnh \u0111\u00e3 l\u00e0 deny incoming v\u00e0 kh\u00f4ng t\u1ed3n t\u1ea1i quy t\u1eafc cho ph\u00e9p c\u1ed5ng 3306, b\u1ea1n kh\u00f4ng c\u1ea7n th\u00eam quy t\u1eafc t\u1eeb ch\u1ed1i ri\u00eang.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu tr\u01b0\u1edbc \u0111\u00f3 \u0111\u00e3 t\u1ea1o quy t\u1eafc m\u1edf c\u1ed5ng MySQL cho m\u1ecdi ngu\u1ed3n, c\u1ea7n x\u00f3a ho\u1eb7c ch\u1ec9nh s\u1eeda quy t\u1eafc cho ph\u00e9p t\u01b0\u01a1ng \u1ee9ng. M\u1ed9t quy t\u1eafc t\u1eeb ch\u1ed1i \u0111\u01b0\u1ee3c th\u00eam sau ch\u01b0a ch\u1eafc c\u00f3 th\u1ec3 ghi \u0111\u00e8 quy t\u1eafc cho ph\u00e9p \u0111\u1ee9ng tr\u01b0\u1edbc.<\/p>\n\n\n\n<h3 id=\"X\u00f3a_quy_t\u1eafc_v\u00e0_qu\u1ea3n_l\u00fd_nh\u1eadt_k\u00fd_t\u01b0\u1eddng_l\u1eeda\"><strong>X\u00f3a quy t\u1eafc v\u00e0 qu\u1ea3n l\u00fd nh\u1eadt k\u00fd t\u01b0\u1eddng l\u1eeda<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 xem danh s\u00e1ch quy t\u1eafc k\u00e8m s\u1ed1 th\u1ee9 t\u1ef1, nh\u1eadp:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw status numbered<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5, n\u1ebfu mu\u1ed1n x\u00f3a quy t\u1eafc s\u1ed1 5, s\u1eed d\u1ee5ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw delete 5<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3, ki\u1ec3m tra l\u1ea1i danh s\u00e1ch \u0111\u1ec3 x\u00e1c nh\u1eadn quy t\u1eafc \u0111\u00e3 \u0111\u01b0\u1ee3c x\u00f3a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">S\u1ed1 th\u1ee9 t\u1ef1 c\u00f3 th\u1ec3 thay \u0111\u1ed5i sau m\u1ed7i l\u1ea7n th\u00eam ho\u1eb7c x\u00f3a quy t\u1eafc. V\u00ec v\u1eady, c\u1ea7n ki\u1ec3m tra l\u1ea1i tr\u01b0\u1edbc khi th\u1ef1c hi\u1ec7n thao t\u00e1c ti\u1ebfp theo.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-13-1024x549.png\" alt=\"X\u00f3a quy t\u1eafc v\u00e0 qu\u1ea3n l\u00fd nh\u1eadt k\u00fd t\u01b0\u1eddng l\u1eeda\" class=\"wp-image-132794\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-13-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-13-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-13-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-13-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-13-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>X\u00f3a quy t\u1eafc theo s\u1ed1 th\u1ee9 t\u1ef1<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 x\u00f3a quy t\u1eafc theo n\u1ed9i dung. V\u00ed d\u1ee5, x\u00f3a quy t\u1eafc cho ph\u00e9p c\u1ed5ng 8080:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw delete allow 8080\/tcp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">L\u1ec7nh n\u00e0y \u00e1p d\u1ee5ng khi quy t\u1eafc t\u01b0\u01a1ng \u1ee9ng \u0111\u00e3 t\u1ed3n t\u1ea1i. \u0110\u1ec3 b\u1eadt ghi nh\u1eadt k\u00fd UFW:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw logging on<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 xem tr\u1ea1ng th\u00e1i v\u00e0 m\u1ee9c \u0111\u1ed9 ghi nh\u1eadt k\u00fd:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw status verbose<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u1eadt k\u00fd h\u1ed7 tr\u1ee3 ng\u01b0\u1eddi qu\u1ea3n tr\u1ecb t\u00ecm hi\u1ec3u nh\u1eefng k\u1ebft n\u1ed1i b\u1ecb ch\u1eb7n ho\u1eb7c ho\u1ea1t \u0111\u1ed9ng m\u1ea1ng \u0111\u00e1ng ch\u00fa \u00fd. Tuy nhi\u00ean, c\u1ea7n theo d\u00f5i dung l\u01b0\u1ee3ng l\u01b0u tr\u1eef n\u1ebfu l\u01b0u l\u01b0\u1ee3ng truy c\u1eadp l\u1edbn.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-14-1024x549.png\" alt=\"X\u00f3a theo n\u1ed9i dung v\u00e0 b\u1eadt nh\u1eadt k\u00fd t\u01b0\u1eddng l\u1eeda\" class=\"wp-image-132795\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-14-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-14-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-14-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-14-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-14-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>X\u00f3a theo n\u1ed9i dung v\u00e0 b\u1eadt nh\u1eadt k\u00fd t\u01b0\u1eddng l\u1eeda<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h2 id=\"C\u1ea5u_h\u00ecnh_t\u01b0\u1eddng_l\u1eeda_cho_VPS_AlmaLinux\/Rocky_Linux_b\u1eb1ng_firewalld\"><strong>C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS AlmaLinux\/Rocky Linux b\u1eb1ng firewalld<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ed1i v\u1edbi VPS ch\u1ea1y AlmaLinux ho\u1eb7c Rocky Linux, b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng <strong>firewalld<\/strong> \u0111\u1ec3 qu\u1ea3n l\u00fd nh\u1eefng d\u1ecbch v\u1ee5 v\u00e0 c\u1ed5ng m\u1ea1ng \u0111\u01b0\u1ee3c ph\u00e9p truy c\u1eadp.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u00e1c v\u1edbi UFW, firewalld s\u1eed d\u1ee5ng kh\u00e1i ni\u1ec7m <em>zone<\/em> \u0111\u1ec3 nh\u00f3m c\u00e1c quy t\u1eafc theo m\u1ee9c \u0111\u1ed9 tin c\u1eady c\u1ee7a m\u1ea1ng ho\u1eb7c giao di\u1ec7n.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Tr\u01b0\u1edbc ti\u00ean, k\u1ebft n\u1ed1i SSH v\u00e0o VPS v\u00e0 ki\u1ec3m tra phi\u00ean b\u1ea3n h\u1ec7 \u0111i\u1ec1u h\u00e0nh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/os-release<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-15-1024x549.png\" alt=\"C\u00e0i \u0111\u1eb7t firewalld\" class=\"wp-image-132796\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-15-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-15-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-15-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-15-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-15-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>C\u00e0i \u0111\u1eb7t firewalld<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h3 id=\"B\u01b0\u1edbc_1:_C\u00e0i_\u0111\u1eb7t_firewalld\"><strong>B\u01b0\u1edbc 1: C\u00e0i \u0111\u1eb7t firewalld<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu ch\u01b0a c\u00e0i \u0111\u1eb7t, nh\u1eadp:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo dnf install -y firewalld<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra d\u1ecbch v\u1ee5 c\u00f3 \u0111ang ch\u1ea1y hay kh\u00f4ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl is-active firewalld<\/code><\/pre>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_2:_C\u1ea5u_h\u00ecnh_quy_t\u1eafc_tr\u01b0\u1edbc_khi_kh\u1edfi_ch\u1ea1y\"><strong>B\u01b0\u1edbc 2: C\u1ea5u h\u00ecnh quy t\u1eafc tr\u01b0\u1edbc khi kh\u1edfi ch\u1ea1y<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu k\u1ebft qu\u1ea3 l\u00e0 inactive, n\u00ean c\u1ea5u h\u00ecnh quy\u1ec1n truy c\u1eadp SSH tr\u01b0\u1edbc khi b\u1eadt d\u1ecbch v\u1ee5.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u1edbi c\u1ed5ng SSH m\u1eb7c \u0111\u1ecbnh 22:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo firewall-offline-cmd --add-service=ssh<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu SSH s\u1eed d\u1ee5ng c\u1ed5ng t\u00f9y ch\u1ec9nh, ch\u1eb3ng h\u1ea1n 2222, c\u1ea7n m\u1edf th\u00eam \u0111\u00fang c\u1ed5ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo firewall-offline-cmd --add-port=2222\/tcp<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-16-1024x549.png\" alt=\"\" class=\"wp-image-132797\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-16-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-16-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-16-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-16-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-16-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>C\u1ea5u h\u00ecnh quy t\u1eafc tr\u01b0\u1edbc khi kh\u1edfi ch\u1ea1y<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ed1i v\u1edbi VPS ch\u1ea1y website, cho ph\u00e9p HTTP v\u00e0 HTTPS:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo firewall-offline-cmd --add-service=http\n\nsudo firewall-offline-cmd --add-service=https<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u1eefng l\u1ec7nh tr\u00ean c\u1ea5u h\u00ecnh zone m\u1eb7c \u0111\u1ecbnh khi firewalld ch\u01b0a ho\u1ea1t \u0111\u1ed9ng. N\u1ebfu giao di\u1ec7n m\u1ea1ng \u0111\u01b0\u1ee3c g\u00e1n cho zone kh\u00e1c, c\u1ea7n s\u1eed d\u1ee5ng \u0111\u00fang zone t\u01b0\u01a1ng \u1ee9ng.<\/p>\n\n\n\n<h3 id=\"B\u01b0\u1edbc_3:_K\u00edch_ho\u1ea1t_firewalld\"><strong>B\u01b0\u1edbc 3: K\u00edch ho\u1ea1t firewalld<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Sau khi chu\u1ea9n b\u1ecb c\u00e1c quy t\u1eafc c\u1ea7n thi\u1ebft:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl enable --now firewalld<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">L\u1ec7nh s\u1ebd kh\u1edfi ch\u1ea1y firewalld v\u00e0 thi\u1ebft l\u1eadp d\u1ecbch v\u1ee5 kh\u1edfi \u0111\u1ed9ng c\u00f9ng h\u1ec7 th\u1ed1ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu firewalld \u0111\u00e3 ho\u1ea1t \u0111\u1ed9ng t\u1eeb tr\u01b0\u1edbc, kh\u00f4ng s\u1eed d\u1ee5ng c\u00e1c l\u1ec7nh firewall-offline-cmd ph\u00eda tr\u00ean. Thay v\u00e0o \u0111\u00f3, b\u1ea1n c\u00f3 th\u1ec3 b\u1ed5 sung quy t\u1eafc b\u1eb1ng firewall-cmd.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5, m\u1edf HTTP v\u00e0 HTTPS trong zone m\u1eb7c \u0111\u1ecbnh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo firewall-cmd --permanent --add-service=http\n\nsudo firewall-cmd --permanent --add-service=https\n\nsudo firewall-cmd --reload<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-17-1024x549.png\" alt=\"K\u00edch ho\u1ea1t firewalld\" class=\"wp-image-132798\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-17-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-17-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-17-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-17-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-17-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>K\u00edch ho\u1ea1t firewalld<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<h3 id=\"B\u01b0\u1edbc_4:_Ki\u1ec3m_tra_k\u1ebft_qu\u1ea3\"><strong>B\u01b0\u1edbc 4: Ki\u1ec3m tra k\u1ebft qu\u1ea3<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Ki\u1ec3m tra nh\u1eefng zone \u0111ang ho\u1ea1t \u0111\u1ed9ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo firewall-cmd --get-active-zones<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3, xem c\u00e1c quy t\u1eafc trong zone m\u1eb7c \u0111\u1ecbnh:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo firewall-cmd --list-all<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu giao di\u1ec7n m\u1ea1ng s\u1eed d\u1ee5ng zone kh\u00e1c zone m\u1eb7c \u0111\u1ecbnh, h\u00e3y ki\u1ec3m tra zone th\u1ef1c t\u1ebf b\u1eb1ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo firewall-cmd --zone=public --list-all<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Trong v\u00ed d\u1ee5 n\u00e0y, public c\u1ea7n \u0111\u01b0\u1ee3c thay b\u1eb1ng zone \u0111ang g\u1eafn v\u1edbi giao di\u1ec7n m\u1ea1ng c\u1ee7a VPS.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-18-1024x549.png\" alt=\"Ki\u1ec3m tra k\u1ebft qu\u1ea3\" class=\"wp-image-132800\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-18-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-18-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-18-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-18-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-18-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Ki\u1ec3m tra k\u1ebft qu\u1ea3<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Khi s\u1eed d\u1ee5ng <strong>&#8211;permanent<\/strong>, c\u00e1c thay \u0111\u1ed5i \u0111\u01b0\u1ee3c l\u01b0u l\u1ea1i \u0111\u1ec3 s\u1eed d\u1ee5ng sau khi kh\u1edfi \u0111\u1ed9ng l\u1ea1i ho\u1eb7c t\u1ea3i l\u1ea1i firewalld. Nh\u1eefng thay \u0111\u1ed5i n\u00e0y ch\u01b0a c\u00f3 hi\u1ec7u l\u1ef1c t\u1ee9c th\u00ec n\u1ebfu ch\u01b0a \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng v\u00e0o c\u1ea5u h\u00ecnh runtime.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>L\u01b0u \u00fd:<\/strong> Kh\u00f4ng n\u00ean \u0111\u1ed3ng th\u1eddi qu\u1ea3n l\u00fd c\u00f9ng m\u1ed9t b\u1ed9 quy t\u1eafc m\u1ea1ng b\u1eb1ng UFW, firewalld v\u00e0 nh\u1eefng c\u00f4ng c\u1ee5 c\u1ea5u h\u00ecnh c\u1ea5p th\u1ea5p kh\u00e1c n\u1ebfu ch\u01b0a hi\u1ec3u r\u00f5 c\u00e1ch c\u00e1c quy t\u1eafc t\u01b0\u01a1ng t\u00e1c v\u1edbi nhau.<\/p>\n\n\n\n<h2 id=\"C\u1ea5u_h\u00ecnh_t\u01b0\u1eddng_l\u1eeda_cho_VPS_Windows_Server\"><strong>C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS Windows Server<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ed1i v\u1edbi VPS Windows Server, b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng Windows Defender Firewall \u0111\u1ec3 qu\u1ea3n l\u00fd c\u00e1c k\u1ebft n\u1ed1i m\u00e0 kh\u00f4ng c\u1ea7n c\u00e0i \u0111\u1eb7t UFW.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1ch \u0111\u01a1n gi\u1ea3n cho ng\u01b0\u1eddi m\u1edbi l\u00e0 s\u1eed d\u1ee5ng giao di\u1ec7n Windows Firewall with Advanced Security.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 1:<\/strong> K\u1ebft n\u1ed1i v\u00e0o VPS Windows Server b\u1eb1ng Remote Desktop v\u00e0 \u0111\u0103ng nh\u1eadp b\u1eb1ng t\u00e0i kho\u1ea3n c\u00f3 quy\u1ec1n qu\u1ea3n tr\u1ecb.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 2:<\/strong> Nh\u1ea5n <strong>Windows + R<\/strong>, nh\u1eadp <strong>wf.msc<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3, nh\u1ea5n <strong>Enter<\/strong> \u0111\u1ec3 m\u1edf c\u00f4ng c\u1ee5 qu\u1ea3n l\u00fd t\u01b0\u1eddng l\u1eeda.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 3:<\/strong> Ch\u1ecdn <strong>Inbound Rules<\/strong> \u1edf menu b\u00ean tr\u00e1i, sau \u0111\u00f3 nh\u1ea5p <strong>New Rule&#8230;<\/strong>.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-19-1024x549.png\" alt=\"C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS Windows Server\" class=\"wp-image-132801\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-19-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-19-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-19-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-19-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-19-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS Windows Server<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 4:<\/strong> Ch\u1ecdn lo\u1ea1i quy t\u1eafc <strong>Port<\/strong>, nh\u1ea5n <strong>Next<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 5:<\/strong> Ch\u1ecdn giao th\u1ee9c <strong>TCP<\/strong> v\u00e0 m\u1ee5c <strong>Specific local ports<\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00ed d\u1ee5, n\u1ebfu mu\u1ed1n m\u1edf c\u1ed5ng 80 v\u00e0 443 cho website, nh\u1eadp:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>80,443<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u1ea5n <strong>Next<\/strong> \u0111\u1ec3 ti\u1ebfp t\u1ee5c.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 6:<\/strong> Ch\u1ecdn <strong>Allow the connection<\/strong>, sau \u0111\u00f3 l\u1ef1a ch\u1ecdn nh\u1eefng network profile ph\u00f9 h\u1ee3p v\u1edbi c\u1ea5u h\u00ecnh m\u00e1y ch\u1ee7.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>B\u01b0\u1edbc 7:<\/strong> \u0110\u1eb7t t\u00ean d\u1ec5 nh\u1eadn bi\u1ebft, ch\u1eb3ng h\u1ea1n Allow Web HTTP HTTPS, r\u1ed3i nh\u1ea5n <strong>Finish<\/strong>.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-20-1024x549.png\" alt=\"C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS Windows Server\" class=\"wp-image-132802\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-20-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-20-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-20-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-20-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-20-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS Windows Server<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">Quy t\u1eafc m\u1edbi s\u1ebd xu\u1ea5t hi\u1ec7n trong danh s\u00e1ch Inbound Rules.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">B\u1ea1n c\u0169ng c\u00f3 th\u1ec3 t\u1ea1o quy t\u1eafc b\u1eb1ng PowerShell v\u1edbi quy\u1ec1n Administrator. V\u00ed d\u1ee5, cho ph\u00e9p k\u1ebft n\u1ed1i TCP v\u00e0o c\u1ed5ng 80:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>New-NetFirewallRule -DisplayName \"Allow HTTP 80\" -Direction Inbound -Action Allow -Protocol TCP -LocalPort 80<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u0110\u1eb7c bi\u1ec7t l\u01b0u \u00fd:<\/strong> Tr\u01b0\u1edbc khi thay \u0111\u1ed5i ch\u00ednh s\u00e1ch t\u01b0\u1eddng l\u1eeda tr\u00ean Windows Server, ph\u1ea3i \u0111\u1ea3m b\u1ea3o c\u1ed5ng Remote Desktop \u0111ang s\u1eed d\u1ee5ng v\u1eabn \u0111\u01b0\u1ee3c cho ph\u00e9p. C\u1ed5ng RDP m\u1eb7c \u0111\u1ecbnh l\u00e0 3389\/TCP nh\u01b0ng c\u00f3 th\u1ec3 \u0111\u00e3 \u0111\u01b0\u1ee3c thay \u0111\u1ed5i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ed1i v\u1edbi VPS Windows \u0111ang s\u1eed d\u1ee5ng th\u1ef1c t\u1ebf, n\u00ean \u01b0u ti\u00ean gi\u1edbi h\u1ea1n quy\u1ec1n RDP theo \u0111\u1ecba ch\u1ec9 IP ngu\u1ed3n ho\u1eb7c th\u00f4ng qua VPN, thay v\u00ec m\u1edf cho to\u00e0n b\u1ed9 Internet.<\/p>\n\n\n\n<h2 id=\"C\u00e1ch_ki\u1ec3m_tra_v\u00e0_kh\u1eafc_ph\u1ee5c_l\u1ed7i_t\u01b0\u1eddng_l\u1eeda_VPS\"><strong>C\u00e1ch ki\u1ec3m tra v\u00e0 kh\u1eafc ph\u1ee5c l\u1ed7i t\u01b0\u1eddng l\u1eeda VPS<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Khi VPS kh\u00f4ng th\u1ec3 k\u1ebft n\u1ed1i SSH ho\u1eb7c website ng\u1eebng truy c\u1eadp sau khi c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda, c\u1ea7n x\u00e1c \u0111\u1ecbnh nguy\u00ean nh\u00e2n tr\u01b0\u1edbc khi th\u1ef1c hi\u1ec7n thay \u0111\u1ed5i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nh\u1eefng s\u1ef1 c\u1ed1 ph\u1ed5 bi\u1ebfn bao g\u1ed3m:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><tbody><tr><td><strong>T\u00ecnh tr\u1ea1ng<\/strong><\/td><td><strong>Nguy\u00ean nh\u00e2n c\u00f3 th\u1ec3 x\u1ea3y ra<\/strong><\/td><td><strong>C\u00e1ch x\u1eed l\u00fd<\/strong><\/td><\/tr><tr><td>Kh\u00f4ng k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c SSH<\/td><td>Ch\u01b0a cho ph\u00e9p \u0111\u00fang c\u1ed5ng SSH ho\u1eb7c IP qu\u1ea3n tr\u1ecb<\/td><td>Ki\u1ec3m tra quy t\u1eafc SSH v\u00e0 \u0111\u1ecba ch\u1ec9 ngu\u1ed3n<\/td><\/tr><tr><td>Website kh\u00f4ng truy c\u1eadp \u0111\u01b0\u1ee3c<\/td><td>Ch\u01b0a m\u1edf c\u1ed5ng 80\/443 ho\u1eb7c web server g\u1eb7p l\u1ed7i<\/td><td>Ki\u1ec3m tra UFW v\u00e0 d\u1ecbch v\u1ee5 web<\/td><\/tr><tr><td>\u0110\u00e3 m\u1edf port nh\u01b0ng v\u1eabn kh\u00f4ng k\u1ebft n\u1ed1i \u0111\u01b0\u1ee3c<\/td><td>D\u1ecbch v\u1ee5 ch\u01b0a l\u1eafng nghe ho\u1eb7c t\u01b0\u1eddng l\u1eeda nh\u00e0 cung c\u1ea5p \u0111ang ch\u1eb7n<\/td><td>Ki\u1ec3m tra c\u1ed5ng l\u1eafng nghe v\u00e0 firewall b\u00ean ngo\u00e0i VPS<\/td><\/tr><tr><td>Kh\u00f4ng th\u1ec3 truy c\u1eadp b\u1eb1ng IPv6<\/td><td>Quy t\u1eafc IPv6 ch\u01b0a \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng ph\u00f9 h\u1ee3p<\/td><td>Ki\u1ec3m tra c\u1ea5u h\u00ecnh IPv6 v\u00e0 c\u00e1c quy t\u1eafc t\u01b0\u01a1ng \u1ee9ng<\/td><\/tr><tr><td>Truy c\u1eadp \u0111\u01b0\u1ee3c tr\u01b0\u1edbc khi b\u1eadt UFW nh\u01b0ng b\u1ecb l\u1ed7i sau \u0111\u00f3<\/td><td>Quy t\u1eafc cho ph\u00e9p ch\u01b0a \u0111\u1ea7y \u0111\u1ee7 ho\u1eb7c xung \u0111\u1ed9t<\/td><td>R\u00e0 so\u00e1t danh s\u00e1ch quy t\u1eafc v\u00e0 th\u1ee9 t\u1ef1 \u00e1p d\u1ee5ng<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 ki\u1ec3m tra c\u1ed5ng TCP \u0111ang l\u1eafng nghe tr\u00ean VPS Linux, s\u1eed d\u1ee5ng:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ss -lntp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu \u1ee9ng d\u1ee5ng ch\u01b0a l\u1eafng nghe tr\u00ean c\u1ed5ng c\u1ea7n thi\u1ebft, vi\u1ec7c m\u1edf c\u1ed5ng trong t\u01b0\u1eddng l\u1eeda c\u0169ng kh\u00f4ng th\u1ec3 gi\u00fap truy c\u1eadp d\u1ecbch v\u1ee5 th\u00e0nh c\u00f4ng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ed1i v\u1edbi m\u00e1y t\u00ednh Windows, c\u00f3 th\u1ec3 m\u1edf PowerShell \u0111\u1ec3 ki\u1ec3m tra kh\u1ea3 n\u0103ng k\u1ebft n\u1ed1i \u0111\u1ebfn c\u1ed5ng SSH:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Test-NetConnection -ComputerName 203.0.113.20 -Port 22<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Thay 203.0.113.20 b\u1eb1ng IP public c\u1ee7a VPS v\u00e0 22 b\u1eb1ng c\u1ed5ng SSH th\u1ef1c t\u1ebf.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu \u0111\u00e3 m\u1ea5t k\u1ebft n\u1ed1i SSH do c\u1ea5u h\u00ecnh UFW, b\u1ea1n n\u00ean th\u1ef1c hi\u1ec7n theo th\u1ee9 t\u1ef1:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Truy c\u1eadp VPS qua Console, VNC ho\u1eb7c Rescue Mode do nh\u00e0 cung c\u1ea5p h\u1ed7 tr\u1ee3, n\u1ebfu c\u00f3.<\/li>\n\n\n\n<li>Ki\u1ec3m tra tr\u1ea1ng th\u00e1i b\u1eb1ng sudo ufw status verbose.<\/li>\n\n\n\n<li>B\u1ed5 sung \u0111\u00fang quy t\u1eafc cho ph\u00e9p SSH v\u00e0 IP qu\u1ea3n tr\u1ecb.<\/li>\n\n\n\n<li>Ki\u1ec3m tra k\u1ebft n\u1ed1i t\u1eeb m\u00e1y t\u00ednh tr\u01b0\u1edbc khi \u0111\u00f3ng Console.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Trong tr\u01b0\u1eddng h\u1ee3p kh\u1ea9n c\u1ea5p v\u00e0 \u0111\u00e3 x\u00e1c \u0111\u1ecbnh UFW l\u00e0 nguy\u00ean nh\u00e2n, c\u00f3 th\u1ec3 t\u1ea1m th\u1eddi v\u00f4 hi\u1ec7u h\u00f3a t\u1eeb Console:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw disable<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Sau \u0111\u00f3, ki\u1ec3m tra v\u00e0 c\u1ea5u h\u00ecnh l\u1ea1i c\u00e1c quy t\u1eafc c\u1ea7n thi\u1ebft tr\u01b0\u1edbc khi b\u1eadt UFW tr\u1edf l\u1ea1i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng n\u00ean duy tr\u00ec tr\u1ea1ng th\u00e1i t\u1eaft t\u01b0\u1eddng l\u1eeda l\u00e2u d\u00e0i khi ch\u01b0a c\u00f3 bi\u1ec7n ph\u00e1p ki\u1ec3m so\u00e1t truy c\u1eadp thay th\u1ebf ph\u00f9 h\u1ee3p.<\/p>\n\n\n\n<h2 id=\"Nh\u1eefng_l\u01b0u_\u00fd_quan_tr\u1ecdng_khi_c\u1ea5u_h\u00ecnh_Firewall_VPS\"><strong>Nh\u1eefng l\u01b0u \u00fd quan tr\u1ecdng khi c\u1ea5u h\u00ecnh Firewall VPS<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 t\u01b0\u1eddng l\u1eeda ho\u1ea1t \u0111\u1ed9ng hi\u1ec7u qu\u1ea3 m\u00e0 kh\u00f4ng \u1ea3nh h\u01b0\u1edfng \u0111\u1ebfn d\u1ecbch v\u1ee5, b\u1ea1n n\u00ean ghi nh\u1edb nh\u1eefng nguy\u00ean t\u1eafc sau:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Lu\u00f4n cho ph\u00e9p SSH tr\u01b0\u1edbc khi k\u00edch ho\u1ea1t t\u01b0\u1eddng l\u1eeda:<\/strong> \u0110\u1ea3m b\u1ea3o c\u1ed5ng v\u00e0 IP qu\u1ea3n tr\u1ecb \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh ch\u00ednh x\u00e1c.<\/li>\n\n\n\n<li><strong>Ch\u1ec9 m\u1edf nh\u1eefng c\u1ed5ng c\u1ea7n thi\u1ebft:<\/strong> H\u1ea1n ch\u1ebf c\u00f4ng khai c\u00e1c d\u1ecbch v\u1ee5 database, Redis ho\u1eb7c giao di\u1ec7n qu\u1ea3n tr\u1ecb.<\/li>\n\n\n\n<li><strong>Ki\u1ec3m tra c\u1ea3 IPv4 v\u00e0 IPv6:<\/strong> N\u1ebfu VPS c\u00f3 \u0111\u1ecba ch\u1ec9 IPv6 public, c\u1ea7n \u0111\u1ea3m b\u1ea3o ch\u00ednh s\u00e1ch t\u01b0\u1eddng l\u1eeda c\u0169ng \u00e1p d\u1ee5ng ph\u00f9 h\u1ee3p cho IPv6.<\/li>\n\n\n\n<li><strong>Ki\u1ec3m tra t\u01b0\u1eddng l\u1eeda c\u1ee7a nh\u00e0 cung c\u1ea5p:<\/strong> VPS c\u00f3 th\u1ec3 \u0111\u1ed3ng th\u1eddi ch\u1ecbu \u1ea3nh h\u01b0\u1edfng t\u1eeb firewall t\u1ea1i h\u1ec7 \u0111i\u1ec1u h\u00e0nh v\u00e0 h\u1ec7 th\u1ed1ng m\u1ea1ng c\u1ee7a nh\u00e0 cung c\u1ea5p.<\/li>\n\n\n\n<li><strong>Th\u1eadn tr\u1ecdng khi s\u1eed d\u1ee5ng Docker:<\/strong> C\u00e1c c\u1ed5ng \u0111\u01b0\u1ee3c c\u00f4ng khai qua Docker c\u00f3 th\u1ec3 \u0111i qua quy t\u1eafc m\u1ea1ng ri\u00eang v\u00e0 kh\u00f4ng ch\u1ecbu s\u1ef1 ki\u1ec3m so\u00e1t nh\u01b0 mong \u0111\u1ee3i c\u1ee7a UFW.<\/li>\n\n\n\n<li><strong>L\u01b0u l\u1ea1i ph\u01b0\u01a1ng \u00e1n kh\u00f4i ph\u1ee5c:<\/strong> N\u00ean bi\u1ebft c\u00e1ch truy c\u1eadp Console ho\u1eb7c Rescue Mode tr\u01b0\u1edbc khi thay \u0111\u1ed5i quy t\u1eafc quan tr\u1ecdng.<\/li>\n\n\n\n<li><strong>Th\u01b0\u1eddng xuy\u00ean r\u00e0 so\u00e1t quy t\u1eafc:<\/strong> X\u00f3a nh\u1eefng c\u1ed5ng kh\u00f4ng c\u00f2n s\u1eed d\u1ee5ng v\u00e0 h\u1ea1n ch\u1ebf quy\u1ec1n truy c\u1eadp theo nhu c\u1ea7u th\u1ef1c t\u1ebf.<\/li>\n<\/ul>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-22-1024x549.png\" alt=\"C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS Windows Server\" class=\"wp-image-132803\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-22-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-22-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-22-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-22-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-22-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong><strong>Nh\u1eefng l\u01b0u \u00fd quan tr\u1ecdng khi c\u1ea5u h\u00ecnh Firewall VPS<\/strong><\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\"><strong>L\u01b0u \u00fd ri\u00eang \u0111\u1ed1i v\u1edbi VPS ch\u1ea1y Docker, n8n ho\u1eb7c AI Agent:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu Docker c\u00f4ng khai m\u1ed9t c\u1ed5ng b\u1eb1ng c\u1ea5u h\u00ecnh nh\u01b0:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ports:\n\n&nbsp;&nbsp;- \"5678:5678\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">C\u1ed5ng n\u00e0y c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c truy c\u1eadp t\u1eeb b\u00ean ngo\u00e0i m\u00e1y ch\u1ee7, t\u00f9y c\u1ea5u h\u00ecnh m\u1ea1ng v\u00e0 c\u00e1c l\u1edbp b\u1ea3o m\u1eadt li\u00ean quan. \u0110\u1eb7c bi\u1ec7t, Docker c\u00f3 th\u1ec3 x\u1eed l\u00fd l\u01b0u l\u01b0\u1ee3ng tr\u01b0\u1edbc nh\u1eefng quy t\u1eafc UFW th\u00f4ng th\u01b0\u1eddng.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu \u1ee9ng d\u1ee5ng ch\u1ec9 c\u1ea7n \u0111\u01b0\u1ee3c truy c\u1eadp qua Reverse Proxy tr\u00ean c\u00f9ng VPS, m\u1ed9t c\u00e1ch c\u1ea5u h\u00ecnh ph\u00f9 h\u1ee3p h\u01a1n l\u00e0:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ports:\n\n&nbsp;&nbsp;- \"127.0.0.1:5678:5678\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">C\u00e1ch \u00e1nh x\u1ea1 n\u00e0y gi\u1edbi h\u1ea1n c\u1ed5ng xu\u1ea5t b\u1ea3n v\u00e0o giao di\u1ec7n loopback IPv4 c\u1ee7a m\u00e1y ch\u1ee7 trong m\u00f4 h\u00ecnh Docker bridge th\u00f4ng th\u01b0\u1eddng. Reverse Proxy c\u00f3 th\u1ec3 ti\u1ebfp nh\u1eadn y\u00eau c\u1ea7u t\u1eeb b\u00ean ngo\u00e0i qua HTTPS v\u00e0 chuy\u1ec3n ti\u1ebfp \u0111\u1ebfn \u1ee9ng d\u1ee5ng n\u1ed9i b\u1ed9.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-large\"><img decoding=\"async\" width=\"1024\" height=\"549\" src=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-23-1024x549.png\" alt=\"Nh\u1eefng l\u01b0u \u00fd quan tr\u1ecdng khi c\u1ea5u h\u00ecnh Firewall VPS\" class=\"wp-image-132804\" title=\"\" srcset=\"https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-23-1024x549.png 1024w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-23-300x161.png 300w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-23-768x411.png 768w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-23-1536x823.png 1536w, https:\/\/tino.vn\/blog\/wp-content\/uploads\/2026\/10\/cau-hinh-tuong-lua-cho-vps-23-2048x1097.png 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><figcaption class=\"wp-element-caption\"><strong>Nh\u1eefng l\u01b0u \u00fd quan tr\u1ecdng khi c\u1ea5u h\u00ecnh Firewall VPS<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">V\u1edbi m\u00f4i tr\u01b0\u1eddng c\u00f3 nhi\u1ec1u container, VPN ho\u1eb7c m\u1ea1ng t\u00f9y ch\u1ec9nh, c\u1ea7n \u0111\u00e1nh gi\u00e1 th\u00eam quy t\u1eafc Docker v\u00e0 c\u1ea5u h\u00ecnh m\u1ea1ng th\u1ef1c t\u1ebf tr\u01b0\u1edbc khi tri\u1ec3n khai.<\/p>\n\n\n\n<h2 id=\"K\u1ebft_lu\u1eadn\"><strong>K\u1ebft lu\u1eadn<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS l\u00e0 b\u01b0\u1edbc c\u01a1 b\u1ea3n nh\u01b0ng quan tr\u1ecdng \u0111\u1ec3 ki\u1ec3m so\u00e1t truy c\u1eadp v\u00e0 gi\u1ea3m r\u1ee7i ro b\u1ea3o m\u1eadt. V\u1edbi Ubuntu\/Debian, UFW gi\u00fap ng\u01b0\u1eddi m\u1edbi d\u1ec5 d\u00e0ng qu\u1ea3n l\u00fd nh\u1eefng c\u1ed5ng c\u1ea7n thi\u1ebft; trong khi firewalld ph\u00f9 h\u1ee3p v\u1edbi c\u00e1c h\u1ec7 \u0111i\u1ec1u h\u00e0nh thu\u1ed9c h\u1ecd RHEL.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110i\u1ec1u quan tr\u1ecdng nh\u1ea5t l\u00e0 <strong>lu\u00f4n cho ph\u00e9p c\u1ed5ng qu\u1ea3n tr\u1ecb tr\u01b0\u1edbc khi b\u1eadt t\u01b0\u1eddng l\u1eeda<\/strong>, ch\u1ec9 c\u00f4ng khai d\u1ecbch v\u1ee5 th\u1ef1c s\u1ef1 c\u1ea7n thi\u1ebft v\u00e0 ki\u1ec3m tra l\u1ea1i kh\u1ea3 n\u0103ng k\u1ebft n\u1ed1i sau m\u1ed7i thay \u0111\u1ed5i.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">N\u1ebfu \u0111ang t\u00ecm ki\u1ebfm m\u00e1y ch\u1ee7 \u0111\u1ec3 tri\u1ec3n khai website ho\u1eb7c \u1ee9ng d\u1ee5ng ri\u00eang, b\u1ea1n c\u00f3 th\u1ec3 tham kh\u1ea3o <a href=\"https:\/\/tino.vn\/vps-gia-re\" target=\"_blank\" rel=\"noreferrer noopener\">d\u1ecbch v\u1ee5 VPS c\u1ee7a Tino<\/a> \u0111\u1ec3 l\u1ef1a ch\u1ecdn m\u00f4i tr\u01b0\u1eddng ph\u00f9 h\u1ee3p v\u1edbi nhu c\u1ea7u s\u1eed d\u1ee5ng.<\/p>\n\n\n\n<h2 id=\"Nh\u1eefng_c\u00e2u_h\u1ecfi_th\u01b0\u1eddng_g\u1eb7p\"><strong>Nh\u1eefng c\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p<\/strong><\/h2>\n\n\n\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"C\u00f3_c\u1ea7n_c\u1ea5u_h\u00ecnh_t\u01b0\u1eddng_l\u1eeda_cho_VPS_m\u1edbi_mua_kh\u00f4ng?\">C\u00f3 c\u1ea7n c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS m\u1edbi mua kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">C\u00f3. Khi tri\u1ec3n khai VPS m\u1edbi, b\u1ea1n n\u00ean ki\u1ec3m tra nh\u1eefng c\u1ed5ng \u0111ang \u0111\u01b0\u1ee3c m\u1edf v\u00e0 thi\u1ebft l\u1eadp ch\u00ednh s\u00e1ch truy c\u1eadp ph\u00f9 h\u1ee3p. Tuy nhi\u00ean, kh\u00f4ng n\u00ean m\u1eb7c \u0111\u1ecbnh r\u1eb1ng VPS ch\u01b0a c\u00f3 b\u1ea5t k\u1ef3 c\u01a1 ch\u1ebf b\u1ea3o v\u1ec7 n\u00e0o, v\u00ec m\u1ed9t s\u1ed1 nh\u00e0 cung c\u1ea5p \u0111\u00e3 \u00e1p d\u1ee5ng t\u01b0\u1eddng l\u1eeda \u1edf l\u1edbp h\u1ea1 t\u1ea7ng. C\u1ea7n ki\u1ec3m tra c\u1ea3 hai l\u1edbp tr\u01b0\u1edbc khi thay \u0111\u1ed5i.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"B\u1eadt_UFW_c\u00f3_l\u00e0m_m\u1ea5t_k\u1ebft_n\u1ed1i_SSH_kh\u00f4ng?\">B\u1eadt UFW c\u00f3 l\u00e0m m\u1ea5t k\u1ebft n\u1ed1i SSH kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">C\u00f3 th\u1ec3, n\u1ebfu c\u1ed5ng SSH ho\u1eb7c \u0111\u1ecba ch\u1ec9 IP qu\u1ea3n tr\u1ecb ch\u01b0a \u0111\u01b0\u1ee3c cho ph\u00e9p. Tr\u01b0\u1edbc khi ch\u1ea1y sudo ufw enable, h\u00e3y th\u00eam quy t\u1eafc ph\u00f9 h\u1ee3p v\u1edbi c\u1ed5ng SSH th\u1ef1c t\u1ebf. Sau khi b\u1eadt, gi\u1eef nguy\u00ean phi\u00ean SSH hi\u1ec7n t\u1ea1i v\u00e0 m\u1edf th\u00eam m\u1ed9t phi\u00ean m\u1edbi \u0111\u1ec3 ki\u1ec3m tra tr\u01b0\u1edbc khi ng\u1eaft k\u1ebft n\u1ed1i c\u0169.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"V\u00ec_sao_\u0111\u00e3_m\u1edf_c\u1ed5ng_80_v\u00e0_443_nh\u01b0ng_website_v\u1eabn_kh\u00f4ng_truy_c\u1eadp_\u0111\u01b0\u1ee3c?\">V\u00ec sao \u0111\u00e3 m\u1edf c\u1ed5ng 80 v\u00e0 443 nh\u01b0ng website v\u1eabn kh\u00f4ng truy c\u1eadp \u0111\u01b0\u1ee3c?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">M\u1edf c\u1ed5ng t\u01b0\u1eddng l\u1eeda ch\u1ec9 cho ph\u00e9p l\u01b0u l\u01b0\u1ee3ng \u0111i qua, kh\u00f4ng \u0111\u1ea3m b\u1ea3o website \u0111ang ho\u1ea1t \u0111\u1ed9ng. B\u1ea1n c\u1ea7n ki\u1ec3m tra Nginx, Apache ho\u1eb7c \u1ee9ng d\u1ee5ng web c\u00f3 \u0111ang ch\u1ea1y v\u00e0 l\u1eafng nghe \u0111\u00fang c\u1ed5ng hay kh\u00f4ng. Ngo\u00e0i ra, c\u1ea7n ki\u1ec3m tra \u0111\u1ecba ch\u1ec9 IP, DNS, c\u1ea5u h\u00ecnh Reverse Proxy v\u00e0 quy t\u1eafc firewall c\u1ee7a nh\u00e0 cung c\u1ea5p.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"Khi_ch\u1ea1y_Docker,_ch\u1ec9_b\u1eadt_UFW_\u0111\u00e3_\u0111\u1ee7_b\u1ea3o_v\u1ec7_c\u00e1c_c\u1ed5ng_container_ch\u01b0a?\">Khi ch\u1ea1y Docker, ch\u1ec9 b\u1eadt UFW \u0111\u00e3 \u0111\u1ee7 b\u1ea3o v\u1ec7 c\u00e1c c\u1ed5ng container ch\u01b0a?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Ch\u01b0a \u0111\u1ee7. Docker c\u00f3 th\u1ec3 t\u1ea1o nh\u1eefng quy t\u1eafc m\u1ea1ng ri\u00eang khi c\u00f4ng khai c\u1ed5ng container, khi\u1ebfn m\u1ed9t s\u1ed1 l\u01b0u l\u01b0\u1ee3ng kh\u00f4ng ch\u1ecbu s\u1ef1 ki\u1ec3m so\u00e1t c\u1ee7a UFW nh\u01b0 mong \u0111\u1ee3i. B\u1ea1n c\u1ea7n ki\u1ec3m tra c\u1ea5u h\u00ecnh ports, gi\u1edbi h\u1ea1n \u0111\u1ecba ch\u1ec9 bind ph\u00f9 h\u1ee3p, \u0111\u1ed3ng th\u1eddi s\u1eed d\u1ee5ng firewall \u1edf l\u1edbp h\u1ea1 t\u1ea7ng ho\u1eb7c c\u00e1c quy t\u1eafc Docker chuy\u00ean bi\u1ec7t khi c\u1ea7n.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"C\u00f3_c\u1ea7n_c\u1ea5u_h\u00ecnh_t\u01b0\u1eddng_l\u1eeda_ri\u00eang_cho_IPv6_kh\u00f4ng?\">C\u00f3 c\u1ea7n c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda ri\u00eang cho IPv6 kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">C\u00f3, n\u1ebfu VPS s\u1eed d\u1ee5ng IPv6. UFW c\u00f3 th\u1ec3 h\u1ed7 tr\u1ee3 quy t\u1eafc cho c\u1ea3 IPv4 v\u00e0 IPv6 khi t\u00ednh n\u0103ng IPv6 \u0111\u01b0\u1ee3c b\u1eadt trong c\u1ea5u h\u00ecnh t\u01b0\u01a1ng \u1ee9ng. B\u1ea1n n\u00ean ki\u1ec3m tra k\u1ebft qu\u1ea3 <code>sudo ufw status verbose<\/code> v\u00e0 th\u1eed truy c\u1eadp b\u1eb1ng IPv6 n\u1ebfu m\u00e1y ch\u1ee7 c\u00f3 \u0111\u1ecba ch\u1ec9 IPv6 public, tr\u00e1nh b\u1ecf s\u00f3t \u0111\u01b0\u1eddng k\u1ebft n\u1ed1i ngo\u00e0i \u00fd mu\u1ed1n.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section\t\thelp class=\"sc_fs_faq sc_card    \"\n\t\t\t\t>\n\t\t\t\t<h2 id=\"C\u1ea5u_h\u00ecnh_t\u01b0\u1eddng_l\u1eeda_c\u00f3_gi\u00fap_VPS_ch\u1ed1ng_m\u1ecdi_cu\u1ed9c_t\u1ea5n_c\u00f4ng_m\u1ea1ng_kh\u00f4ng?\">C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda c\u00f3 gi\u00fap VPS ch\u1ed1ng m\u1ecdi cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng kh\u00f4ng?<\/h2>\t\t\t\t<div>\n\t\t\t\t\t\t<div class=\"sc_fs_faq__content\">\n\t\t\t\t\n\n<p class=\"wp-block-paragraph\">Kh\u00f4ng. T\u01b0\u1eddng l\u1eeda gi\u00fap l\u1ecdc l\u01b0u l\u01b0\u1ee3ng v\u00e0 gi\u1ea3m kh\u1ea3 n\u0103ng truy c\u1eadp c\u00e1c d\u1ecbch v\u1ee5 kh\u00f4ng c\u1ea7n thi\u1ebft, nh\u01b0ng kh\u00f4ng th\u1ec3 ng\u0103n ch\u1eb7n m\u1ecdi h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng. VPS v\u1eabn c\u1ea7n c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m, x\u00e1c th\u1ef1c SSH an to\u00e0n, b\u1ea3o v\u1ec7 \u1ee9ng d\u1ee5ng, sao l\u01b0u d\u1eef li\u1ec7u v\u00e0 s\u1eed d\u1ee5ng gi\u1ea3i ph\u00e1p ch\u1ed1ng DDoS \u1edf l\u1edbp h\u1ea1 t\u1ea7ng khi c\u1ea7n thi\u1ebft.<\/p>\n\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t<\/section>\n\t\t\n<script type=\"application\/ld+json\">\n\t{\n\t\t\"@context\": \"https:\/\/schema.org\",\n\t\t\"@type\": \"FAQPage\",\n\t\t\"mainEntity\": [\n\t\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"C\u00f3 c\u1ea7n c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS m\u1edbi mua kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>C\u00f3. Khi tri\u1ec3n khai VPS m\u1edbi, b\u1ea1n n\u00ean ki\u1ec3m tra nh\u1eefng c\u1ed5ng \u0111ang \u0111\u01b0\u1ee3c m\u1edf v\u00e0 thi\u1ebft l\u1eadp ch\u00ednh s\u00e1ch truy c\u1eadp ph\u00f9 h\u1ee3p. Tuy nhi\u00ean, kh\u00f4ng n\u00ean m\u1eb7c \u0111\u1ecbnh r\u1eb1ng VPS ch\u01b0a c\u00f3 b\u1ea5t k\u1ef3 c\u01a1 ch\u1ebf b\u1ea3o v\u1ec7 n\u00e0o, v\u00ec m\u1ed9t s\u1ed1 nh\u00e0 cung c\u1ea5p \u0111\u00e3 \u00e1p d\u1ee5ng t\u01b0\u1eddng l\u1eeda \u1edf l\u1edbp h\u1ea1 t\u1ea7ng. C\u1ea7n ki\u1ec3m tra c\u1ea3 hai l\u1edbp tr\u01b0\u1edbc khi thay \u0111\u1ed5i.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"B\u1eadt UFW c\u00f3 l\u00e0m m\u1ea5t k\u1ebft n\u1ed1i SSH kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>C\u00f3 th\u1ec3, n\u1ebfu c\u1ed5ng SSH ho\u1eb7c \u0111\u1ecba ch\u1ec9 IP qu\u1ea3n tr\u1ecb ch\u01b0a \u0111\u01b0\u1ee3c cho ph\u00e9p. Tr\u01b0\u1edbc khi ch\u1ea1y sudo ufw enable, h\u00e3y th\u00eam quy t\u1eafc ph\u00f9 h\u1ee3p v\u1edbi c\u1ed5ng SSH th\u1ef1c t\u1ebf. Sau khi b\u1eadt, gi\u1eef nguy\u00ean phi\u00ean SSH hi\u1ec7n t\u1ea1i v\u00e0 m\u1edf th\u00eam m\u1ed9t phi\u00ean m\u1edbi \u0111\u1ec3 ki\u1ec3m tra tr\u01b0\u1edbc khi ng\u1eaft k\u1ebft n\u1ed1i c\u0169.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"V\u00ec sao \u0111\u00e3 m\u1edf c\u1ed5ng 80 v\u00e0 443 nh\u01b0ng website v\u1eabn kh\u00f4ng truy c\u1eadp \u0111\u01b0\u1ee3c?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>M\u1edf c\u1ed5ng t\u01b0\u1eddng l\u1eeda ch\u1ec9 cho ph\u00e9p l\u01b0u l\u01b0\u1ee3ng \u0111i qua, kh\u00f4ng \u0111\u1ea3m b\u1ea3o website \u0111ang ho\u1ea1t \u0111\u1ed9ng. B\u1ea1n c\u1ea7n ki\u1ec3m tra Nginx, Apache ho\u1eb7c \u1ee9ng d\u1ee5ng web c\u00f3 \u0111ang ch\u1ea1y v\u00e0 l\u1eafng nghe \u0111\u00fang c\u1ed5ng hay kh\u00f4ng. Ngo\u00e0i ra, c\u1ea7n ki\u1ec3m tra \u0111\u1ecba ch\u1ec9 IP, DNS, c\u1ea5u h\u00ecnh Reverse Proxy v\u00e0 quy t\u1eafc firewall c\u1ee7a nh\u00e0 cung c\u1ea5p.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"Khi ch\u1ea1y Docker, ch\u1ec9 b\u1eadt UFW \u0111\u00e3 \u0111\u1ee7 b\u1ea3o v\u1ec7 c\u00e1c c\u1ed5ng container ch\u01b0a?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Ch\u01b0a \u0111\u1ee7. Docker c\u00f3 th\u1ec3 t\u1ea1o nh\u1eefng quy t\u1eafc m\u1ea1ng ri\u00eang khi c\u00f4ng khai c\u1ed5ng container, khi\u1ebfn m\u1ed9t s\u1ed1 l\u01b0u l\u01b0\u1ee3ng kh\u00f4ng ch\u1ecbu s\u1ef1 ki\u1ec3m so\u00e1t c\u1ee7a UFW nh\u01b0 mong \u0111\u1ee3i. B\u1ea1n c\u1ea7n ki\u1ec3m tra c\u1ea5u h\u00ecnh ports, gi\u1edbi h\u1ea1n \u0111\u1ecba ch\u1ec9 bind ph\u00f9 h\u1ee3p, \u0111\u1ed3ng th\u1eddi s\u1eed d\u1ee5ng firewall \u1edf l\u1edbp h\u1ea1 t\u1ea7ng ho\u1eb7c c\u00e1c quy t\u1eafc Docker chuy\u00ean bi\u1ec7t khi c\u1ea7n.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"C\u00f3 c\u1ea7n c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda ri\u00eang cho IPv6 kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>C\u00f3, n\u1ebfu VPS s\u1eed d\u1ee5ng IPv6. UFW c\u00f3 th\u1ec3 h\u1ed7 tr\u1ee3 quy t\u1eafc cho c\u1ea3 IPv4 v\u00e0 IPv6 khi t\u00ednh n\u0103ng IPv6 \u0111\u01b0\u1ee3c b\u1eadt trong c\u1ea5u h\u00ecnh t\u01b0\u01a1ng \u1ee9ng. B\u1ea1n n\u00ean ki\u1ec3m tra k\u1ebft qu\u1ea3 sudo ufw status verbose v\u00e0 th\u1eed truy c\u1eadp b\u1eb1ng IPv6 n\u1ebfu m\u00e1y ch\u1ee7 c\u00f3 \u0111\u1ecba ch\u1ec9 IPv6 public, tr\u00e1nh b\u1ecf s\u00f3t \u0111\u01b0\u1eddng k\u1ebft n\u1ed1i ngo\u00e0i \u00fd mu\u1ed1n.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t,\t\t\t\t{\n\t\t\t\t\"@type\": \"Question\",\n\t\t\t\t\"name\": \"C\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda c\u00f3 gi\u00fap VPS ch\u1ed1ng m\u1ecdi cu\u1ed9c t\u1ea5n c\u00f4ng m\u1ea1ng kh\u00f4ng?\",\n\t\t\t\t\"acceptedAnswer\": {\n\t\t\t\t\t\"@type\": \"Answer\",\n\t\t\t\t\t\"text\": \"<p>Kh\u00f4ng. T\u01b0\u1eddng l\u1eeda gi\u00fap l\u1ecdc l\u01b0u l\u01b0\u1ee3ng v\u00e0 gi\u1ea3m kh\u1ea3 n\u0103ng truy c\u1eadp c\u00e1c d\u1ecbch v\u1ee5 kh\u00f4ng c\u1ea7n thi\u1ebft, nh\u01b0ng kh\u00f4ng th\u1ec3 ng\u0103n ch\u1eb7n m\u1ecdi h\u00ecnh th\u1ee9c t\u1ea5n c\u00f4ng. VPS v\u1eabn c\u1ea7n c\u1eadp nh\u1eadt ph\u1ea7n m\u1ec1m, x\u00e1c th\u1ef1c SSH an to\u00e0n, b\u1ea3o v\u1ec7 \u1ee9ng d\u1ee5ng, sao l\u01b0u d\u1eef li\u1ec7u v\u00e0 s\u1eed d\u1ee5ng gi\u1ea3i ph\u00e1p ch\u1ed1ng DDoS \u1edf l\u1edbp h\u1ea1 t\u1ea7ng khi c\u1ea7n thi\u1ebft.<\/p>\"\n\t\t\t\t\t\t\t\t\t}\n\t\t\t}\n\t\t\t\t\t\t]\n\t}\n<\/script>\n","protected":false},"excerpt":{"rendered":"<p>\u0110\u1ec3 c\u1ea5u h\u00ecnh t\u01b0\u1eddng l\u1eeda cho VPS, b\u1ea1n c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng UFW tr\u00ean Ubuntu\/Debian ho\u1eb7c firewalld tr\u00ean AlmaLinux\/Rocky Linux. C\u00e1ch th\u1ef1c hi\u1ec7n c\u01a1 b\u1ea3n l\u00e0 cho ph\u00e9p c\u00e1c c\u1ed5ng c\u1ea7n thi\u1ebft nh\u01b0 SSH, HTTP, HTTPS, thi\u1ebft l\u1eadp quy t\u1eafc ch\u1eb7n k\u1ebft n\u1ed1i kh\u00f4ng mong mu\u1ed1n, sau \u0111\u00f3 k\u00edch ho\u1ea1t t\u01b0\u1eddng l\u1eeda. Vi\u1ec7c c\u1ea5u h\u00ecnh [&hellip;]<\/p>\n","protected":false},"author":23,"featured_media":132805,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7728],"tags":[7738],"class_list":["post-132537","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-quan-tri-server","tag-cau-hinh-tuong-lua-cho-vps"],"_links":{"self":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/132537","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/comments?post=132537"}],"version-history":[{"count":4,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/132537\/revisions"}],"predecessor-version":[{"id":132807,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/posts\/132537\/revisions\/132807"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media\/132805"}],"wp:attachment":[{"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/media?parent=132537"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/categories?post=132537"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tino.vn\/blog\/wp-json\/wp\/v2\/tags?post=132537"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}