Question
How to restrict droplet to only accept connections over private IP
- Posted on February 18, 2023
- DigitalOcean VPCDockerSecurityUbuntu
Asked by Mattias Welander
I see that each droplet has a publiv IPv4 adress and a private VPC adress. How can I easily configure an Ubuntu docker droplet to only accept connections from within the VPC (i.e. via the private IP)?
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Hollie's Hub for Good
Working on improving health and education, reducing inequality, and spurring economic growth? We’d like to help.
Get started for free
Enter your email to get $200 in credit for your first 60 days with DigitalOcean.
New accounts only. By submitting your email you agree to our Privacy Policy.
Hello @mattiaswelander
I believe with a docker container this can be easily achieved by specifying localhost in the required host IP when you spin the container.
An example is
docker run -p 127.0.0.1:1234:80This should do the trick for you.
Hope that this helps!
Hey @mattiaswelander,
You can just deny all incoming connection using your firewall, either IP tables or UFW. You can choose one of them and use it.
If you wish to use IPtables, check the following article:
https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands
If you wish to use UFW, you can check this one out:
https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-with-ufw-on-ubuntu-20-04