Report this

What is the reason for this report?

Potential Firewall Log Impact on Database Operations

Posted on April 24, 2024

Hi everyone, I’m planning to migrate my SQL Server database to this cloud provider. Our company recently had an issue with a different provider where write operations were locked because that cloud provider had a firewall (it was a separate device) and the logs of the firewall somehow affected the database server (the support team couldn’t provide more information). So, we had to request access to the firewall, delete the logs and restart the database.

My boss said that every VPS (or droplet) includes a firewall (like that cloud provider did) so I came here to ask if this could happen in this platform.

Here’s my question:

  • Could something similar happen if I buy a Shared Droplet and use it as a database?

Extra information:

  • That firewall was a separate device, and it was part of the cloud provider, that’s why we had to request access to that firewall to delete the logs.
  • I believe it was the fault of that other cloud provider, but I still have to ask for completeness.


This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Hi there,

DigitalOcean offers Cloud firewalls, but they don’t come automatically with each Droplet unless you explicitly create one and attach it to your Droplet:

https://docs.digitalocean.com/products/networking/firewalls/

The firewall service for Droplets is provided at no additional cost. But you still need to configure it explicitly and attach it to your Droplet.

On another note, with most Linux distributions you do get a software firewall installed such as firewalld or ufw, but this is something that runs on the Droplet itself, and you do have full root access and will be able to manage the firewall rules as you please.

Let me know if you have any questions!

Best,

Bobby

Heya,

UFW is a host-based tool. That is, it has to be configured on each Droplet separately and add the necessary rules manually.

https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-with-ufw-on-ubuntu

DigitalOcean’s Cloud Firewall is a network-based one. The same firewall rules can be applied on a large number of Droplets. DigitalOcean’s Cloud Firewall has the advantage of scalability. As it supports tagging of the Droplets, we can add custom labels to Droplets.

Regards

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.