I wanted to confirm my understanding: Each k8s node is given a public ipv4 address The default firewall rule blocks all traffic from the public internet If you add a load-balancer with k8s, just that load-balancer IP address will be exposed, and can send traffic to k8s nodes, but they are still not directly exposed. This seems to be the case based on what firewall rules I see, but wanted to confirm it.

DigitalOcean

- Log in to:
- Community
- DigitalOcean
- Sign up for:
- Community
- DigitalOcean

Question

Default Firewalls for DigitalOcean K8s

Posted on February 23, 2024
DigitalOcean Managed Kubernetes
Asked by Kyle Loveless

I wanted to confirm my understanding:

Each k8s node is given a public ipv4 address
The default firewall rule blocks all traffic from the public internet
If you add a load-balancer with k8s, just that load-balancer IP address will be exposed, and can send traffic to k8s nodes, but they are still not directly exposed.

This seems to be the case based on what firewall rules I see, but wanted to confirm it.

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

KFSys

Site Moderator