- How to Configure Firewall Rules
- Firewalls Pricing
- Getting Started with Cloud Firewalls
- How do I debug a firewall causing connection problems with my Droplet?
- How to Create Firewalls
- Firewalls Quickstart
- How to View All Firewall Rules Applied to a Droplet
- How to Organize DigitalOcean Cloud Firewalls
- How can I allowlist the DigitalOcean metrics agent with my firewall?
- Firewalls Details
Cloud Firewalls
Generated on 12 Aug 2026
DigitalOcean Cloud Firewalls are a network-based, stateful firewall service for Droplets provided at no additional cost. Cloud firewalls block all traffic that isn’t expressly permitted by a rule.
Getting Started
Quickstarts and intermediate tutorials to get started.
How-Tos
How to accomplish specific tasks in detail, like creation/deletion, configuration, and management.
Reference
Native and third-party tools, troubleshooting, and answers to frequently asked questions.
Concepts
Explanations and definitions of core concepts in Firewalls.
Details
Features, plans and pricing, availability, limits, known issues, and more.
Support
Get help with technical support and answers to frequently asked questions.
Latest Updates
4 August 2026
-
Cloud firewall rules now support an action of allow or deny. Deny rules let you block traffic from specific sources, such as known malicious IP addresses, while allowing broader access to your services. Deny rules take precedence over allow rules that match the same traffic. For rule actions and configuration steps, see How to Configure Firewall Rules.
31 March 2026
-
Control plane firewalls for DigitalOcean Kubernetes are now in general availability. Control plane firewalls restrict access to your cluster’s API server to a set of allowed IP addresses. Worker node IPs are automatically kept in sync as nodes scale up or down.
You can enable control plane firewalls using the DigitalOcean API, doctl, or Terraform.
27 June 2024
-
Control plane firewalls are now available in early availability for select DOKS customers. For more information, see How to Add a Control Plane Firewall.
For more information, see all Cloud Firewalls release notes.