I want to make my DO Loadbalancer can only be accessible via https://www.cloudflare.com/ips/ and my internal droplet backend, how can do that? Please assist me, sensei!
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Accepted Answer
Hi there,
Currently, you can only add firewall rules to a load balancer using the CLI or API.
To add or remove firewall rules from an existing load balancer using the CLI, use the --allow-list
and --deny-list
flags with the update command to define a list of IP addresses and CIDRs that the load balancer will accept or block incoming connections from.
To add or remove firewall rules via the command-line, follow these steps:
Install doctl
, the DigitalOcean command-line tool.
Create a personal access token, and save it for use with doctl
.
Use the token to grant doctl
access to your DigitalOcean account.
doctl auth init
Copy
Finally, add or remove firewall rules with doctl compute load-balancer update
. The basic usage looks like this, but you’ll want to read the usage docs for more details:
doctl compute load-balancer update <id> [flags]
You can find the full documentation here:
Hope that this helps!
Best,
Bobby
Hi,
Is there a quick way to deny all IP traffic rather than list all the IPs in --deny-list? I don’t have a list of all possible IP address in the world, I just want to deny everything and whitelist a few address that I need. How can the be accomplished via the CLI?
Thank you -
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
Full documentation for every DigitalOcean product.
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
Stay up to date by signing up for DigitalOcean’s Infrastructure as a Newsletter.
New accounts only. By submitting your email you agree to our Privacy Policy
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.