Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloud Firewalls

digitalocean.com

Post reply on HN
Print view View original

31–40 of 119 posts

Re: Cloud Firewalls

#31

Post by Tostino »

dsugarman wrote: post #15
Tostino wrote: post #4

Earlier quoted context omitted.

I would be extremely happy with DO if they put out an S3 competitor. Right now, most of my servers are on DO, the only things I need AWS for is a single windows server to run some windows only software, and S3 to store my database backups.

it's always smart to store your backups on another service anyway for any doomsday scenarios

Oh even if DO offered an S3 competitor, i'd still have them going to S3 as well. I'd just have them also going to DO's solution, so restores would be MUCH faster, and wouldn't cost an arm and a leg.

Re: Cloud Firewalls

#32

Post by StavrosK »

odonnellryan wrote: post #27
StavrosK wrote: post #19

Earlier quoted context omitted.

This is exactly why my next server will be on Vultr, too, although I still curse Linode for still not having block storage and forcing me to pay double price for a larger server even though I just need 20 more GB of disk space.

Not supporting Linode, but can't you use something like AWS for that?

Hmm, how do you mean? Mount an EC2 volume on a Linode server? The latency would be horrible.

Re: Cloud Firewalls

#33

Post by AYBABTME »

daxorid wrote: post #9

It's not clear what this offers over the usual iptables/firewalld + ansible solution. What am I missing?

iptables will consume resources on your droplet (CPU/network) to filter out the traffic. Cloud Firewalls are applied directly by the DO network, before ever hitting any of your droplets, so it uses none of your resources.

Re: Cloud Firewalls

#34

Post by tyingq »

egeozcan wrote: post #28
Tostino wrote: post #4

Earlier quoted context omitted.

I would be extremely happy with DO if they put out an S3 competitor. Right now, most of my servers are on DO, the only things I need AWS for is a single windows server to run some windows only software, and S3 to store my database backups.

There's also Backblaze: https://www.backblaze.com/b2/cloud-storage.html

B2 is nice, but the single location is something of a deal-breaker as far as being an S3 replacement.

Re: Cloud Firewalls

#35

Post by odonnellryan »

StavrosK wrote: post #32
odonnellryan wrote: post #27

Earlier quoted context omitted.

Not supporting Linode, but can't you use something like AWS for that?

Hmm, how do you mean? Mount an EC2 volume on a Linode server? The latency would be horrible.

Or S3, or another DO box, I guess. You're right that you'd never get excellent latency, but it could be good for storage.

Re: Cloud Firewalls

#36

Post by peterwwillis »

genpage wrote: post #22
daxorid wrote: post #9

It's not clear what this offers over the usual iptables/firewalld + ansible solution. What am I missing?

Disclaimer: DO Support here The traffic is blocked/allowed at our network layer before being routed to the droplet. The rules are easily configurable through the control panel and API. You can also specify Droplets (individual or tagged) and our recently new Load Balancers as the targets. You can also layer multiple firewalls on top of one another if you want to apply specific firewall rules to only a specific set of…

How many firewalls can a single user create, and how many rules can be in each firewall? How is the order of multiple firewalls applied to the same droplet determined? Where is there logging to show when a rule matched? Is there any future plan to support REJECTing packets rather than only DROPing? Will the user interface warn the user when they are about to block all traffic (including ssh) to a droplet?

Re: Cloud Firewalls

#37

Post by michaelmior »

odonnellryan wrote: post #26
jimaek wrote: post #11

Once they double the RAM on all plans like Linode and Vultr did, I will move all of my servers back to DigitalOcean. I love these features but double the RAM for the same price still outweighs them.

I had so many problems with Linode. The company itself seems really poorly structured, too. Do you consider this when you're talking about value? I know little about vultr. 5 vs 10 vs 20 vs 40 dollars doesn't mean much, and Linode pricing starts to converge on DO's after the $80 price point.

> 5 vs 10 vs 20 vs 40 dollars doesn't mean much

This depends entirely on what you're doing with it. For a hobby project, it makes a big difference to me.

Re: Cloud Firewalls

#38

Post by halfeatenpie »

jimaek wrote: post #11

Once they double the RAM on all plans like Linode and Vultr did, I will move all of my servers back to DigitalOcean. I love these features but double the RAM for the same price still outweighs them.

Vultr has the cheaper side down I will admit, but their network hasn't been to great for me. It's great for development work but for production-level stuff I wouldn't put anything on it.

Linode is like that old king on the block. They've had security issues in the past (multiple) and since they do store your credit card information those did get released (If I recall). They're decent and they work. They're a bit slower than the other two in my opinion, but they work and that's something I need.

DigitalOcean has been fairly solid and reliable. Yeah you can say you get more resources for how much you spend elsewhere, but DigitalOcean has been more reliable and solid than Vultr. I mean I remember opening support tickets with them and their response being "We took care of someone else on that node. Go ahead." Took me a solid 2 hours just to install a Ubuntu image on one of their (Vultr's) storage nodes. DigitalOcean has never had to give those kinds of responses to me and overall performance and the composition of their nodes has been fairly solid and reliable.

Yeah Vultr and Linode are cheaper and you get more, but I really feel DigitalOcean is solid and more reliable than Vultr. I mean Vultr's SLA is 100% uptime, but their credit return policy is to the effects of "we'll just give you your cheap money back". I don't care about credits and I just want my service online and not having to worry about anything, and most of Vultr's answers has usually been "wait" or "we did it" (but no real long-term solution to the problem). DO has been focusing on providing long-term solutions to problems I've had and no "bs" excuses. Linode has been solid as well, but don't have many of the features DO is starting to roll out with (which fair enough, it's their decision). DO has nothing but praise from me.

Re: Cloud Firewalls

#39

Post by [deleted] »

egeozcan wrote: post #21
entropy128 wrote: post #18

Earlier quoted context omitted.

I've recently done a moderately complex hybrid setup that used DO in conjunction with S3 and Route53. My biggest takeaway from the experience was how much the simplicity and speed of DO's dashboard interface stood out - the AWS web interface just felt laggy by comparison. I know it sounds like a poor reason to favour a platform but DO was just a simple pleasure to navigate and use.

I think the takeaway here is that AWS is designed to be managed via its API and that shows when one tries to use the GUI (Source: Had a similar experience).

[deleted]

Re: Cloud Firewalls

#40

Post by vultour »

the_common_man wrote: post #30

Can someone clarify if the traffic between two droplets is "secure" i.e other droplets cannot see them? On AWS, I can create a VPC and put two ec2 instances on that.

I'm not expert on hypervisors but is what you're saying even possible? One would think that dispatching the correct packets to the correct VM would be an integral part of the virtualization environment.
Post reply on HN