Question

Can I setup firewall for my Apps?

Hi, I am just wondering how to setup firewall for my Apps? Thanks.


Submit an answer


This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

alexdo
Site Moderator
Site Moderator badge
July 10, 2023

Heya,

There are firewalls for the DigitalOcean App Platform, however these firewalls are managed internally and provide protection to your app against any security threats. It allows only platform-level and app-level processes to communicate with your app and blocks any unauthorized or unrecognized processes.

Please note that you cannot manually configure these firewalls as they are managed and maintained by DigitalOcean.

For more information on DigitalOcean’s App Platform’s security features, you can visit the App Platform documentation.

Hope that this helps!

Bobby Iliev
Site Moderator
Site Moderator badge
July 9, 2023

Hey @josephyan,

What you would usually do is to expose only the services that you want to be accessible, and define all of the other services as internal services. That way the internal services will not be accessible externally and you would not need a firewall to protect them. You can follow the steps on how to do that here:

https://docs.digitalocean.com/products/app-platform/how-to/manage-services/#create-an-internal-service

If you would still be interested in seeing a firewall option with the App Platform, the best thing to do to get your voice heard regarding this would be to head over to our Product Ideas board and post a new idea, including as much information as possible for what you’d like to see implemented.

https://ideas.digitalocean.com/

Alternatively, if a firewall is mandatory for your setup, you could migrate your app to a Droplet instead where you could use a Cloud Firewall:

https://docs.digitalocean.com/products/networking/firewalls/

Hope that helps!

- Bobby.

Try DigitalOcean for free

Click below to sign up and get $200 of credit to try our products over 60 days!

Sign up

Featured on Community

Get our biweekly newsletter

Sign up for Infrastructure as a Newsletter.

Hollie's Hub for Good

Working on improving health and education, reducing inequality, and spurring economic growth? We'd like to help.

Become a contributor

Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.

Welcome to the developer cloud

DigitalOcean makes it simple to launch in the cloud and scale up as you grow — whether you're running one virtual machine or ten thousand.

Learn more
DigitalOcean Cloud Control Panel