hello, i want to use my reserved ip as sort of a firewall and have it only allow certain connections but not others e.g ssh so i can have it publically facing but secured, how do i go about applying settings to the reserved ip and not the rest of the droplet itself as when i tried to apply a firewall it only allowed me to apply it to the droplet but i want to be able to use the droplets normal ip to connect to it.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
Hi,
As far as I am aware DigitalOcean Firewalls are tied to Droplets or tags, not directly to Reserved IPs.
So if you’re using both the Droplet’s original IP and a Reserved IP, the firewall rules will apply to the whole Droplet, not just one IP.
If you want different behavior per IP, you’ll need to configure firewall rules manually inside the Droplet using something like iptables or nftables.
That way, you can restrict SSH or any other service to only respond on the Reserved IP.
Otherwise, built-in firewall won’t let you isolate traffic by specific Droplet IPs.
- Bobby
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.