Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloud Firewalls

digitalocean.com

Post reply on HN
Print view View original

21–30 of 119 posts

Re: Cloud Firewalls

#21

Post by egeozcan »

entropy128 wrote: post #18
tyingq wrote: post #2

They seem to be headed towards being an "AWS light". Would be nice to be have an alternative with reasonable egress costs. Still a long way to go though. At a minimum, they would need a more configurable load balancer and some S3 type function.

I've recently done a moderately complex hybrid setup that used DO in conjunction with S3 and Route53. My biggest takeaway from the experience was how much the simplicity and speed of DO's dashboard interface stood out - the AWS web interface just felt laggy by comparison. I know it sounds like a poor reason to favour a platform but DO was just a simple pleasure to navigate and use.

I think the takeaway here is that AWS is designed to be managed via its API and that shows when one tries to use the GUI (Source: Had a similar experience).

Re: Cloud Firewalls

#22

Post by genpage »

daxorid wrote: post #9

It's not clear what this offers over the usual iptables/firewalld + ansible solution. What am I missing?

Disclaimer: DO Support here

The traffic is blocked/allowed at our network layer before being routed to the droplet. The rules are easily configurable through the control panel and API. You can also specify Droplets (individual or tagged) and our recently new Load Balancers as the targets.

You can also layer multiple firewalls on top of one another if you want to apply specific firewall rules to only a specific set of Droplets/LBs

The Intro tutorial we have is great for details: https://www.digitalocean.com/community/tutorials/an-introduc...

Feel free to reach out to us if you have any more specific questions. :)

Re: Cloud Firewalls

#23

Post by cuu508 »

malux85 wrote: post #8

DigitalOcean is killing it against Linode - I just migrated my last services off Linode because you still cannot attach arbitrary sized disks to your instances, something they've been promising as arriving "soon" for months. Go DO!

They both have their pros and cons. Linode offers more RAM for the same price. Linode's load balancers also support IPv6, DO's did not the last time I looked. And Google's Cloud Load Balancer beats both Linode and DigitalOcean hands down in terms of TLS handshakes per second.

Re: Cloud Firewalls

#24

Post by closeparen »

daxorid wrote: post #9

It's not clear what this offers over the usual iptables/firewalld + ansible solution. What am I missing?

For example, let all your Droplets talk to each other (and no one else), but not have to explicitly track the list of IPs and generate firewall rules from that list on every host every time it changes.

Deny outbound access except through specific hosts (config management, internal package mirrors) so that even an attacker with root can't phone home.

The same reasons anyone uses firewall devices vs. host-based firewalls.

Re: Cloud Firewalls

#26

Post by odonnellryan »

jimaek wrote: post #11

Once they double the RAM on all plans like Linode and Vultr did, I will move all of my servers back to DigitalOcean. I love these features but double the RAM for the same price still outweighs them.

I had so many problems with Linode. The company itself seems really poorly structured, too.

Do you consider this when you're talking about value? I know little about vultr.

5 vs 10 vs 20 vs 40 dollars doesn't mean much, and Linode pricing starts to converge on DO's after the $80 price point.

Re: Cloud Firewalls

#27

Post by odonnellryan »

StavrosK wrote: post #19
jimaek wrote: post #11

Once they double the RAM on all plans like Linode and Vultr did, I will move all of my servers back to DigitalOcean. I love these features but double the RAM for the same price still outweighs them.

This is exactly why my next server will be on Vultr, too, although I still curse Linode for still not having block storage and forcing me to pay double price for a larger server even though I just need 20 more GB of disk space.

Not supporting Linode, but can't you use something like AWS for that?

Re: Cloud Firewalls

#28

Post by egeozcan »

Tostino wrote: post #4
tyingq wrote: post #2

They seem to be headed towards being an "AWS light". Would be nice to be have an alternative with reasonable egress costs. Still a long way to go though. At a minimum, they would need a more configurable load balancer and some S3 type function.

I would be extremely happy with DO if they put out an S3 competitor. Right now, most of my servers are on DO, the only things I need AWS for is a single windows server to run some windows only software, and S3 to store my database backups.

There's also Backblaze: https://www.backblaze.com/b2/cloud-storage.html

Re: Cloud Firewalls

#29

Post by lovehashbrowns »

malux85 wrote: post #8

DigitalOcean is killing it against Linode - I just migrated my last services off Linode because you still cannot attach arbitrary sized disks to your instances, something they've been promising as arriving "soon" for months. Go DO!

Am I the only one who has constant issues with VMs in Linode? I feel like that platform is the worst out of all the ones I've tried so far. Unfortunately, our company is stuck with it for now. :(
Post reply on HN