# Install on Vultr

### Create a new instance (virtual machine)

* On the Vultr desktop, select `Products` and click on the `instance tab`.  
* Use the  Plus sign on the right side to create a new instance. Click on "Deploy new server".
* Select "Cloud Compute" as server.\ <img src="https://1574570054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MekeI9EovpQqbUTQSdM%2Fuploads%2FxdJWLx1W2WH9alyA5DoR%2Fimage.png?alt=media&#x26;token=e3aadb87-acb2-409e-aab6-f76ba5bce51f" alt="" data-size="original">
* Select a region near you.
* Select "Debian 11 x64" as server type.\ <img src="https://1574570054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MekeI9EovpQqbUTQSdM%2Fuploads%2FyeV5GWqiKy1aXhjYxO16%2Fimage.png?alt=media&#x26;token=2462b5d7-72bd-44b3-9e77-0f4b8e2ff4c8" alt="" data-size="original">&#x20;
* Choose the smallest size available, that will cost you 5$USD per month.
* Do not add any additional features.
* If you haven't uploaded your public SSH key yet, do so. Vultr does not support log in via password.
* Finally, enter "Rport Server" into the hostname input field and click the blue button `Deploy now`.\
  ![](https://1574570054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MekeI9EovpQqbUTQSdM%2Fuploads%2FylH2vczsUalhLwYM9dlY%2Fimage.png?alt=media\&token=813e8ea9-b8a7-4118-9062-048d053985ae)

### Log in via SSH

After the instance has been deployed, grab the public IP address from the list of instances.<br>

![Grab the public IP address](https://1574570054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MekeI9EovpQqbUTQSdM%2Fuploads%2FoQkjSJveydj3McmCoAkc%2Fimage.png?alt=media\&token=697fe738-65c4-4a34-903d-eef0b2f21a9b)

Log in to the instance using SSH and the root user, for example,  `ssh root@45.76.82.9`.

### Prepare the instance

Vultr installs the Exim Email-Server by default. It's not needed for RPort. \
🧹 Keep your system tidy and uninstall it with `apt purge -y exim4-*`.

### Create a Firewall

{% hint style="danger" %}
By default, new instances are deployed without a firewall. That means all connections except SSH are blocked. **You require a specific firewall for the RPort server.**
{% endhint %}

* On the main products' dashboard, select the firewall tab and click on `Add Firewall Group`.\
  ![](https://1574570054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MekeI9EovpQqbUTQSdM%2Fuploads%2FReRIXuWWCtUrCWnuQdJU%2Fimage.png?alt=media\&token=c5544c9e-2984-4ae0-af73-348d14d19753)
* Name the firewall group `RPort Server` and click on "Add Firewall Group".\
  ![](https://1574570054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MekeI9EovpQqbUTQSdM%2Fuploads%2Fi8dC8NABHjoTpQXUZrJ7%2Fimage.png?alt=media\&token=6a27499b-2abf-45a5-b1db-2a51ac68142f)
* On the ipv4 rules, use the plus sign to add rules.\
  ![](https://1574570054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MekeI9EovpQqbUTQSdM%2Fuploads%2FQ9p4W7C6VgtHUHxcIgyD%2Fimage.png?alt=media\&token=77bdff4b-268c-4311-a286-f3a0b9736332)
* Add the following rules
  * Accept SSH `22` Anywhere `0.0.0.0/0`
  * Accept TCP(HTTP) `80` Anywhere `0.0.0.0/0`
  * Accept TCP(HTTPS) `443` Anywhere `0.0.0.0/0`
  * Accept TCP `20000-3000` Anywhere `0.0.0.0/0`
  * Accept ICMP `-` Anywhere `0.0.0.0/0` 👈 *Do not skip this rule!*
  * Drop any `0-65535` `0.0.0.0/0`

![Vultr Firewall for the rport server](https://1574570054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MekeI9EovpQqbUTQSdM%2Fuploads%2Fl8h3PCLVCwzsb06APcS6%2Fimage.png?alt=media\&token=76e52073-53fd-44a7-aa3f-3c37a967bf4c)

Finally, click on `Linked Instances`, select the rport server and link it to the new firewall by clicking the plus sign. <br>

![Link the rport server instance to the new firewall](https://1574570054-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MekeI9EovpQqbUTQSdM%2Fuploads%2F2wStNPvgy6fMGNB4qJdn%2Fimage.png?alt=media\&token=91b9318d-9b88-460c-97eb-decd83e09d23)

{% hint style="info" %}
Vultr also enables a local firewall inside the virtual machine using [`ufw`](https://manpages.ubuntu.com/manpages/bionic/en/man8/ufw.8.html).\
The rport server installer detects ufw and **adds the needed rules automatically**. Usualy you don't need to configure the local firewall manually. When in doubt check with `ufw status`.
{% endhint %}

### Install the RPort server

👉 Now proceed to [Install RPort on any virgin cloud VM](https://kb.rport.io/install-the-rport-server/install-rport-on-any-virgin-cloud-vm)