Data Centre


Cloud VMs without sane firewalls is nutty, right? Digital Ocean agrees

Build the wall! Build the wall! Build the wall! Build the wall!

By Simon Sharwood


Running a virtual machine in the cloud without a firewall sounds a bit nutty, right? Because security.

And because even when your servers are designed for developers to spin up on the cheap, as is the case for Digital Ocean's droplets, it's a good idea for folks to at least add a fig leaf of security at the beginning of their efforts instead of hoping it can be shoehorned in later.

After years of renting firewall-free VMs in the cloud, Digital Ocean has come around to this way of thinking, adding a free firewall management to its Droplets. You can always install individual firewall software – such as ufw on Linux – by hand on your droplets, but now Digital Ocean has added a way to setup safeguards from a web interface.

The company isn't revealing the source of its firewall, but does suggest they're rather limited beasts with the instruction that you might want to run multiple firewalls per droplet if you want to apply rules for different security chores. The company says the effect of running multiple firewalls will be one big unified happy virtual firewall, even if you have to manage each alone.

The new firewalls are free and reflect the fact that Digital Ocean is slowly moving away from offering just simple cloud servers. In recent times it's also added block storage and load balancers and has a roadmap promising new products for networking and reliability too. ®

Sign up to our NewsletterGet IT in your inbox daily


More from The Register

Database deletion downed Digital Ocean last week

Control panel busted, but servers stayed online

'I am admin' bug turns WD's My Cloud boxes into Everyone's Cloud

Western Digital NAS machines vulnerable to hijacking via HTTP cookies

GitLab offers Digital Ocean to soak up customers' CI burden

Don't worry, yells CEO, we have a data centre in the EU

Brazil says it has bagged Royal Navy flagship HMS Ocean for £84m

Four years ago Brit taxpayers spent £65m doing her up

F5: Don't panic but folks can slip past vulnerable firewall servers, thanks to libssh's credentials-optional 'security'

Updated Also: AWS on avoiding state machine slips

Cheap virtual box hosters – Amazon's Lightsail is out to destroy you (yes, you, Digital Ocean)

AWS re:Invent Look out for bill shock, though, devs's love-in with big biz for digital services continues, as does claim of boosting small firms

More millions handed out to Atos, CDW, AWS...

Un-Delled SonicWall beefs up firewall to wrestle ransomware

Newly-freed security vendor thinks it can drag users into cloudy security analytics

Alibaba pulls dust covers off its new London cloud presence

Can Chinese cloudy crowd check rise of AWS?

Outside of Japan, Fujitsu KILLS the K5 cloud with 'immediate effect'

Another old world vendor to rely on hyperscale beasties... in this instance, Azure