Cloud Firewalls • Hacker News Board

Re: Cloud Firewalls

#61

Post by ethanpil » Tue, Jun 06, 2017, 5:11 PM UTC

xchaotic wrote: post #59

I'm trying to explain what these are to my grandmother. Any car analogies? ;)

They are providing strong walls with carefully planned entry and exits to the "highway." The point is to only allow access to the road from predetermined, controlled points. Although its not 100% guaranteed to control access, it will mitigate many (if not most) of the unwanted traffic. As far as the actual entry and exit points that are sanctioned, those can still cause problems and still need to be monitored.

Re: Cloud Firewalls

#62

Post by blktiger » Tue, Jun 06, 2017, 5:12 PM UTC

xchaotic wrote: post #59

I'm trying to explain what these are to my grandmother. Any car analogies? ;)

A physical firewall is "a wall or partition designed to inhibit or prevent the spread of fire" and a car typically has one in-between the engine and the passenger compartment. That way if the engine starts on fire, the passenger should have time to get out of the car before the fire gets to them.

Computer firewalls are similar in that they are designed to protect the computer (the passenger compartment) from security threats (fire). Just like the firewall in your car, a firewall on a computer probably won't completely prevent security threats from getting through but it will help.

Re: Cloud Firewalls

#63

Post by riffic » Tue, Jun 06, 2017, 5:13 PM UTC

xchaotic wrote: post #59

I'm trying to explain what these are to my grandmother. Any car analogies? ;)

A firewall is named for the structure in an automobile which keeps engine compartment fires out of the passenger cabin.

https://en.wikipedia.org/wiki/Firewall_(engine)

Re: Cloud Firewalls

#64

Post by tyingq » Tue, Jun 06, 2017, 5:15 PM UTC

manacit wrote: post #6

Features like this feel like table stakes for cloud hosting in 2017, so it's nice to see DigitalOcean on board. It'll be interesting to see what the tooling support looks like for this, it looks like it's launching with API support day one: https://developers.digitalocean.com/documentation/v2/ which is great. It looks like they're already working to get it into Terraform: https://github.com/hashicorp/terraform/pull/1…

>I look forward to the day that I can automatically spin up a DigitalOcean set of Droplets running Kubernetes using this

Stackpoint.io can do this, you paste your DO API key and get a k8s cluster in a few minutes. Would be nice if DO built something like that in-house.

Re: Cloud Firewalls

#65

Post by acejam » Tue, Jun 06, 2017, 5:16 PM UTC

malux85 wrote: post #8

DigitalOcean is killing it against Linode - I just migrated my last services off Linode because you still cannot attach arbitrary sized disks to your instances, something they've been promising as arriving "soon" for months. Go DO!

Agreed, same exact situation here. Not having block storage in 2017 is nuts. I'm also about to finally move my last server over to DO.

Re: Cloud Firewalls

#66

Post by raiyu » Tue, Jun 06, 2017, 5:23 PM UTC

the_common_man wrote: post #30

Can someone clarify if the traffic between two droplets is "secure" i.e other droplets cannot see them? On AWS, I can create a VPC and put two ec2 instances on that.

We are about 2 quarters in on VPC, and we are looking to launch a full VPC solution in Q4 of 2017 or early Q1 of 2018. That coupled with firewalls will allow you to completely segment your traffic and also ensure that all private traffic is completely segmented as well.

Re: Cloud Firewalls

#67

Post by raiyu » Tue, Jun 06, 2017, 5:24 PM UTC

Tostino wrote: post #4

tyingq wrote: post #2

They seem to be headed towards being an "AWS light". Would be nice to be have an alternative with reasonable egress costs. Still a long way to go though. At a minimum, they would need a more configurable load balancer and some S3 type function.

I would be extremely happy with DO if they put out an S3 competitor. Right now, most of my servers are on DO, the only things I need AWS for is a single windows server to run some windows only software, and S3 to store my database backups.

Object Storage is currently in internal-company-beta =]

After that we will be doing a customer beta followed by a GA release scheduled for Q3.

=]]

Re: Cloud Firewalls

#68

Post by Tostino » Tue, Jun 06, 2017, 5:30 PM UTC

raiyu wrote: post #67

Tostino wrote: post #4

Earlier quoted context omitted.

I would be extremely happy with DO if they put out an S3 competitor. Right now, most of my servers are on DO, the only things I need AWS for is a single windows server to run some windows only software, and S3 to store my database backups.

Object Storage is currently in internal-company-beta =] After that we will be doing a customer beta followed by a GA release scheduled for Q3. =]]

That makes me really happy to hear. Is there any good way to keep up on potential up-coming features you are working on? I feel like that would be good knowledge to have when making decisions.

Re: Cloud Firewalls

#69

Post by nodomain » Tue, Jun 06, 2017, 5:31 PM UTC

riffic wrote: post #63

xchaotic wrote: post #59

I'm trying to explain what these are to my grandmother. Any car analogies? ;)

A firewall is named for the structure in an automobile which keeps engine compartment fires out of the passenger cabin. https://en.wikipedia.org/wiki/Firewall_(engine)

This is why I love Hackernews.

Re: Cloud Firewalls

#70

Post by [deleted] » Tue, Jun 06, 2017, 5:33 PM UTC

lovehashbrowns wrote: post #29

malux85 wrote: post #8

DigitalOcean is killing it against Linode - I just migrated my last services off Linode because you still cannot attach arbitrary sized disks to your instances, something they've been promising as arriving "soon" for months. Go DO!

Am I the only one who has constant issues with VMs in Linode? I feel like that platform is the worst out of all the ones I've tried so far. Unfortunately, our company is stuck with it for now. :(

[deleted]