not only droplets but also load balancers should be put behind the firewalls