Cloud Firewalls

DigitalOcean Cloud Firewalls are a network-based, stateful firewall service for Droplets provided at no additional cost. Cloud firewalls block all traffic that isn’t expressly permitted by a rule.

Getting Started

Quickstarts and intermediate tutorials to get started.

How-Tos

How to accomplish specific tasks in detail, like creation/deletion, configuration, and management.

Reference

Native and third-party tools, troubleshooting, and answers to frequently asked questions.

Concepts

Explanations and definitions of core concepts in Firewalls.

Details

Features, plans and pricing, availability, limits, known issues, and more.

Support

Get help with technical support and answers to frequently asked questions.

Latest Updates

1 July 2023

• We no longer bill for outbound data transfer that we determine is dropped by a DigitalOcean firewall rule. Learn more about bandwidth billing.

3 August 2021

• You can now add Kubernetes clusters as sources or destinations in Cloud Firewall rules.

27 October 2020

• On Kubernetes 1.19 and later we now provision two fully-managed firewalls for each new Kubernetes cluster. One firewall manages the connection between worker nodes and control plane, and the other manages connections between worker nodes and the public internet.

For more information, see all Cloud Firewalls release notes.