Automate Firewall for Private LAN-ish
I am looking at DO to run a cloud we currently have in AWS VPC, the prices are hard to beat so I am overlooking the fact DO doesn't have a truly safe private network (only available to a user). However, our cloud uses ZMQ between processing nodes and connects to a Cassandra cluster, which we would all like to have at DO, but none of which is authenticated by default. So I was wondering if DO (or anyone else) has a good way to automate firewall rules across a fleet of droplets. Essentially I would like to use something like SaltStack to automatically propagate new node's IP addresses and setup the firewall rules only allowing traffic between those, essentially sort of replicating the VPC from AWS here. I'm sure I could do it by hand, but this is just crazy, I want something 100% automated, has this been done by anyone?