I am a server-side small white, now play in trying to do something,

Environmental:
Cloud host: ali cloud ECS
System: Windows
Purpose: ECS to install 911 s5, implement a port an IP


:
911 s5 in ECS can run normally, ECS test is OK, now I set up the agent, want to directly use the network, but now is not successful,

Security group has been set,
Port, an open test,
Firewall is shut down,

Do I need to ECS network port forwarding to port networks outside? Or link? I need to use what technology? Also hope to be able to give directions, thank you very much,