Hello,

Having a DigitalOcean Firewall would essentially mean that the traffic would be filtered before it even reaches your server. This could be very beneficial in case of a big DDoS attack, that way the malicious traffic would not even reach your droplet.

If you decided not to go with a DigitalOcean firewall, I would strongly recommend always having a software firewall like UFW enabled.

Hope that this helps!
Regards,
Bobby

Hi,

Thank-you! Yes I’m using a firewall.

I’ll try to clarify

My question is whether there is a benefit for just one web hosting server, no other servers, to use a private IP address on the server itself then NAT to the server’s public IP address.

Thanks
q