Network

Currently on the App Platform, attempts to call external servers via SFTP/FTP are not allowed (per technical support). The response to these attempts is currently a timeout after 4 minutes, likely because the request is just ignored and not responded to. For people like myself who missed that line in the documentation, would be VERY nice to get an immediate response that that request type is not allowed so we do not spend days looking at Firewall and other settings. This extends to any other requests (SSH/SSL) that may be ignored.

It would be really nice to be able to generate a pcap file on one of the cloud firewalls that sit in front of a droplet. This would be invaluable for troubleshooting network traffic issues.

I have an APP Platform with an application that consumes a database hosted on a Droplet, but when I try to restrict access to the database port using Cloud Firewall, it doesn't recognize APP Platform as a DigitalOcean resource. It only lists other Droplets but not the APP Platform.

In order to audit current firewall rules it is really awful to go one by one the firewall rule to see which ports are in the rule, and which droplet is associated with it, it must be a way to either view like a spreadsheet wise, or to export the data to be checked offline. thanks, Ignacio

Currently VRRP protocol is not allowed by Cloud Firewall, so having 2 (or more) droplets using KeepAlive works well but when using Cloud Firewall it doesn't works because there is no option to add a rule to Firewall to allow VRRP.

It would be great if the Cloud Firewall had a feature to block IP addresses for individual or a given set. I recently had a particular country kiddie scripting away. I blocked by domain but then I had to still setup it on the server. On the Cloud Firewall the traffic would be stopped and not even reach the server. Its the bread and butter to protect web sites and other.

Currently we can add a port range to firewall rule, but adding the ability to add specific ports separated by comma can be useful and clean

Are you interested in learning more about Linux and FreeBSD cloud hosting? With the increasing popularity of cloud computing, it's important to stay up-to-date on the latest technologies. Fortunately, there are plenty of tutorials available online that can help you get started with Linux and FreeBSD cloud hosting. For those just starting out with these systems, a good place to start is by watching video tutorials or reading articles related to setting up your own server environment using either system. These guides will provide an overview of basic concepts such as setting up accounts and configuring services like Apache web servers or MySQL databases for use in your applications. They’ll also cover topics such as security best practices when working with these systems so that you can ensure maximum safety for both yourself and your data while utilizing them within a hosted environment. Once comfortable enough navigating around the basics, users should consider taking advantage of free trials offered by popular providers like Amazon Web Services (AWS) or Google Cloud Platform (GCP). By signing up for one of these services' offerings, users will be able to gain hands-on experience working within their respective environments without having any upfront costs associated with setup fees or long term commitments that they may not need at this point in time yet still benefit from all the features each platform has available right away without needing additional configuration work done first before getting started properly exploring what’s possible through either service provider's interface options too! Additionally there are many training courses available online which offer comprehensive coverage on topics related specifically towards mastering both Linux & FreeBsd based solutions along other areas relevant towards successful deployment strategies too; including monitoring techniques alongside automated provisioning tools & scripting languages used commonly throughout industry today - making sure students come away feeling confident enough deploying their own projects confidently after completing said coursework successfully! In conclusion if someone wants learn more about how they could deploy their own personal/business application workloads into production then looking into various tutorial resources covering both open source operating systems would definitely be worthwhile investment given amount knowledge gained even during early stages development process itself – allowing developers easily take advantage powerful capabilities provided within modern day public clouds quickly efficiently no matter where located geographically speaking either way!

While there are many tools out there for managing firewalls, not all small companies have the resources of larger companies. Well load out and capable GUIs can make a huge difference in assisting those that don't manage backend servers for a living. When dealing with firewalls it is even more scary. I like what DO has done with simplify firewall management but do feel that the ability to allow/deny by interface is a crucial piece of the equation, especially with the advantages using internal private IP offers. I'd like to suggest idea of adding ability to specify 'from interface' to cloud firewall.

To apply geo location it would be necessary to apply more than 1000 source networks (cidr) for one network rule. Example: Creating a rule who only a specific country can access the service ssh.