Does the Manged SQL service have DDoS attack protection, including anti-DDoS flood protection and a firewall?

Hi there,

Data in MySQL database clusters is encrypted at rest with LUKS (Linux Unified Key Setup) and in transit with SSL. However, there are additional steps you can take to ensure that your data is safe.

You can greatly decrease the likelihood of a security breach by restricting which DigitalOcean resources or external IP addresses are allowed to access the nodes in a cluster. This prevents brute force password and denial-of-service attacks from any server not explicitly permitted to connect.

Typically, only the application servers are allowed to connect to the database cluster. Users access the public-facing site, and the public-facing server authenticates and manages database connections in turn.

You can follow the steps on how to do that here:

https://docs.digitalocean.com/products/databases/mysql/how-to/secure/#add-a-trusted-source-using-the-control-panel

Hope that this helps!

Best,

Bobby