Question

How to restrict droplet to only accept connections over private IP

I see that each droplet has a publiv IPv4 adress and a private VPC adress. How can I easily configure an Ubuntu docker droplet to only accept connections from within the VPC (i.e. via the private IP)?


Submit an answer
Answer a question...

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

alexdo
Site Moderator
Site Moderator badge
February 22, 2023

Hello @mattiaswelander

I believe with a docker container this can be easily achieved by specifying localhost in the required host IP when you spin the container.

An example is docker run -p 127.0.0.1:1234:80

This should do the trick for you.

Hope that this helps!

KFSys
Site Moderator
Site Moderator badge
February 18, 2023

Hey @mattiaswelander,

You can just deny all incoming connection using your firewall, either IP tables or UFW. You can choose one of them and use it.

If you wish to use IPtables, check the following article:

https://www.digitalocean.com/community/tutorials/iptables-essentials-common-firewall-rules-and-commands

If you wish to use UFW, you can check this one out:

https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-with-ufw-on-ubuntu-20-04

Want to learn more? Join the DigitalOcean Community!

Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.