Local Connections with DigitalOcean Firewall enabled

Posted May 24, 2018 3.9k views
DigitalOcean Cloud FirewallsUbuntu 18.04

I created a DigitalOcean Cloud Firewall for a few of my droplets, allowing access to ports 22, 80, and 443. I’m running a Docker Swarm with Traefik as a proxy, but Traefik needs to access ports other than 22, 80, and 443 with local IPs. What I was wondering is if Traefik would still be able to access these ports. Does the DigitalOcean Cloud Firewall only apply on connections to the public droplet IPs or to every IP associated with the droplet?

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Submit an Answer
1 answer

The cloud firewall should only block connections coming in on your public interface. A local firewall can be used if needed to restrict access on the local/private network.