DigitalOcean Cloud Firewalls

digitalocean Firewalldigitalocean-cloud-firewall

Network-based stateful firewall applied outside the Droplet that blocks all traffic no rule permits.

Provider: digitalocean
Kind: Firewall
Category: Security
Official docs: https://docs.digitalocean.com/products/networking/firewalls/

Properties · 3 set by this component

property	type	values	required	kind default	this component
defaultAction	enum	allow \| deny	no	—	▸ deny
denyRules · component property	boolean	—	no	true	inherited
intrusionPrevention	boolean	—	no	—	inherited
logging	boolean	—	no	—	inherited
managed	boolean	—	no	false	▸ true
maxDroplets · component property	integer	—	no	10	inherited
maxRules · component property	integer	—	no	50	inherited
maxSourceEntriesPerRule · component property	integer	—	no	1000	inherited
maxTags · component property	integer	—	no	5	inherited
ruleCount	integer	—	no	—	inherited
stateful	boolean	—	no	—	▸ true

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "cloud-firewall", component: "digitalocean-cloud-firewall" }

Other Firewall products · 35

Cloud Firewallalibaba-cloud-firewallalibabacloudfirewall Network ACLalibaba-network-aclalibabacloudfirewall ECS Security Groupalibaba-security-groupalibabacloudfirewall Network ACLaws-network-aclawsfirewall AWS Network Firewallaws-network-firewallawsfirewall Amazon Route 53 Resolver DNS Firewallaws-route53-dns-firewallawsfirewall Security groupaws-security-groupawsfirewall Microsoft Entra Internet Accessazure-entra-internet-accessazurefirewall Azure Firewallazure-firewallazurefirewall Network Security Groupazure-network-security-groupazurefirewall Network security perimeterazure-network-security-perimeterazurefirewall Cloudflare DNS Firewallcloudflare-dns-firewallcloudflarefirewall Cloudflare Gatewaycloudflare-gatewaycloudflarefirewall Cloudflare Network Firewallcloudflare-network-firewallcloudflarefirewall Generic firewallfirewallfirewall Firewall appliancefirewall-appliancefirewall Fortinet FortiGatefortigatefirewall MikroTik RouterOSmikrotik-routerosfirewall nftablesnftablesfirewall OPNsenseopnsensefirewall Palo Alto Networks NGFWpalo-alto-ngfwfirewall pfSensepfsensefirewall Snortsnortfirewall Suricatasuricatafirewall VyOSvyosfirewall Cloud IDSgoogle-cloud-idsgcpfirewall Cloud NGFWgoogle-cloud-ngfwgcpfirewall Secure Web Proxygoogle-secure-web-proxygcpfirewall IBM Cloud Hardware Firewallibm-firewallibmfirewall VPC Security Groupibm-security-groupibmfirewall NetworkPolicyk8s-network-policyk8sfirewall Network Firewalloci-network-firewallocifirewall Network Security Groupoci-network-security-groupocifirewall Security Listoci-security-listocifirewall Security Groupoutscale-security-groupoutscalefirewall

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# DigitalOcean Cloud Firewall: a "network-based, stateful firewall service for Droplets" applied
3# outside the Droplet at no additional cost; rules carry allow and deny actions and deny takes
4# precedence over an allow matching the same traffic ("Cloud Firewalls"). "Firewalls Limits":
5# firewalls "block all traffic that isn't expressly permitted by a rule", and one firewall covers
6# at most 10 Droplets and 5 tags with 50 inbound and outbound rules combined and 1,000 entries in
7# a rule's sources or destinations.
8schemaVersion: "1"
9type: "component"
10id: "digitalocean-cloud-firewall"
11kind: "firewall"
12provider: "digitalocean"
13docs: "https://docs.digitalocean.com/products/networking/firewalls/"
14defaults:
15  managed: true
16  stateful: true
17  defaultAction: "deny"
18properties:
19  maxRules:
20    type: "integer"
21    default: 50
22  maxDroplets:
23    type: "integer"
24    default: 10
25  maxTags:
26    type: "integer"
27    default: 5
28  maxSourceEntriesPerRule:
29    type: "integer"
30    default: 1000
31  denyRules:
32    type: "boolean"
33    default: true

The same page as markdown, for an agent: /catalogue/components/digitalocean-cloud-firewall.md