DigitalOcean Cloud Firewalls are a network-based, stateful firewall service for Droplets provided at no additional cost. Cloud firewalls block all traffic that isn’t expressly permitted by a rule.
Control plane firewalls are now available in Early Availability for select DOKS customers. For more information, see How to Add a Control Plane Firewall.
We no longer bill for outbound data transfer that we determine is dropped by a DigitalOcean firewall rule. Learn more about bandwidth billing.
You can now add Kubernetes clusters as sources or destinations in Cloud Firewall rules.
For more information, see all Cloud Firewalls release notes.