Once they double the RAM on all plans like Linode and Vultr did, I will move all of my servers back to DigitalOcean.
I love these features but double the RAM for the same price still outweighs them.
Cloud Firewalls
11–20 of 119 posts
Re: Cloud Firewalls
#12It's not clear what this offers over the usual iptables/firewalld + ansible solution. What am I missing?
Point and click configuration for those of us not so comfortable with text files, I guess
Re: Cloud Firewalls
#13It's not clear what this offers over the usual iptables/firewalld + ansible solution. What am I missing?
A GUI.
Seriously though, they are probably using the technologies that you mentioned (or some equivalent) under the hood.
Re: Cloud Firewalls
#14It's not clear what this offers over the usual iptables/firewalld + ansible solution. What am I missing?
It defines a firewall outside of your machine so your iptables/firewalld configuration on individual droplets can be much simpler. (assuming it works like security groups on AWS, create one apply to many.)
Re: Cloud Firewalls
#15They seem to be headed towards being an "AWS light". Would be nice to be have an alternative with reasonable egress costs. Still a long way to go though. At a minimum, they would need a more configurable load balancer and some S3 type function.
I would be extremely happy with DO if they put out an S3 competitor. Right now, most of my servers are on DO, the only things I need AWS for is a single windows server to run some windows only software, and S3 to store my database backups.
it's always smart to store your backups on another service anyway for any doomsday scenarios
Re: Cloud Firewalls
#16They seem to be headed towards being an "AWS light". Would be nice to be have an alternative with reasonable egress costs. Still a long way to go though. At a minimum, they would need a more configurable load balancer and some S3 type function.
I would be extremely happy with DO if they put out an S3 competitor. Right now, most of my servers are on DO, the only things I need AWS for is a single windows server to run some windows only software, and S3 to store my database backups.
Yes. Filestorage is an essential piece of most apps we build and keeps us tied to Amazon (or other competitors like Microsoft or Google who have storage.)
Re: Cloud Firewalls
#17It's not clear what this offers over the usual iptables/firewalld + ansible solution. What am I missing?
The same thing that their load balancer project offers over HAProxy + Ansible - the ability to configure it via their API (or their Web UI) and have DigitalOcean own the implementation and management of everything. This includes making improvements under the hood, security updates, etc.
There's very little you can't do with enough Ansible and other utilities, but letting your cloud hosting provider handle it comes with a lot of benefits.
Re: Cloud Firewalls
#18They seem to be headed towards being an "AWS light". Would be nice to be have an alternative with reasonable egress costs. Still a long way to go though. At a minimum, they would need a more configurable load balancer and some S3 type function.
I've recently done a moderately complex hybrid setup that used DO in conjunction with S3 and Route53.
My biggest takeaway from the experience was how much the simplicity and speed of DO's dashboard interface stood out - the AWS web interface just felt laggy by comparison. I know it sounds like a poor reason to favour a platform but DO was just a simple pleasure to navigate and use.
Re: Cloud Firewalls
#19Once they double the RAM on all plans like Linode and Vultr did, I will move all of my servers back to DigitalOcean. I love these features but double the RAM for the same price still outweighs them.
This is exactly why my next server will be on Vultr, too, although I still curse Linode for still not having block storage and forcing me to pay double price for a larger server even though I just need 20 more GB of disk space.
Re: Cloud Firewalls
#20Finally I can block all SSH access by default and only open up to 1 IP address on demand then remove when finished. No jump hosts required.