Question

Digital Ocean Firewall Rules

Posted on March 14, 2020
DigitalOcean API and CLI (doctl)
Asked by System Admin

Is there any way to delete all the inbound rules from a firewall without specifying the sources via Digital Ocean API?

Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

alexdo

Site Moderator

• March 14, 2020

Accepted Answer

Hello, @dvops

I don’t think that this is currently possible with the API.

You can check the docs for removing inbound rules via API:

https://developers.digitalocean.com/documentation/v2/#remove-rules-from-a-firewall

However as you already mentioned you need to specify the sources when doing the call:

Request Body:

{
  "inbound_rules": [
    {
      "protocol": "tcp",
      "ports": "3306",
      "sources": {
        "droplet_ids": [
          49696269
        ]
      }
    }
  ],
  "outbound_rules": [
    {
      "protocol": "tcp",
      "ports": "3306",
      "destinations": {
        "droplet_ids": [
          49696269
        ]
      }
    }
  ]
}

The best thing to do to get your voice heard regarding this would be to head over to our Product Ideas board and post a new idea, including as much information as possible for what you’d like to see implemented.

https://ideas.digitalocean.com/

Hope that helps!

Alex