Question
How to setup a firewall in-front of a loadbalance
- Posted on June 19, 2024
- NetworkingCloud Firewalls
Asked by bryantrlinares
I would like to setup a firewall in-front of a loadbalancer. I have configured UFW firewalls at the server level. The DigitalOcean tutorial for the loadbalancer seems to be aimed at allowing setup of firewall rules for the droplets but NOT the loadbalancer. Perhaps im missing something, as I dont have alot of experience in networking. Perhaps I need a different product. I f I there is a loadbalancer level firewall, I’d like to put a rate limiter and deny for specific IP Addresses to protect the loadbalancer and scrubout bad traffic. Thank you, any insight would be appreciated.
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.
Hi there,
You cannot add or remove firewall rules to load balancers using the control panel, but you can add them using the API or CLI by adding IP addresses and CIDRs to the
allowlist anddenylist fields.I recently answered a similar question here:
To add or remove firewall rules from an existing load balancer using the CLI, use the
--allow-listand--deny-listflags with the update command to define a list of IP addresses and CIDRs that the load balancer will accept or block incoming connections from.To add or remove firewall rules via the command-line, follow these steps:
Install
doctl, the DigitalOcean command-line tool.Create a personal access token, and save it for use with
doctl.Use the token to grant
doctlaccess to your DigitalOcean account.Copy
Finally, add or remove firewall rules with
doctl compute load-balancer update. The basic usage looks like this, but you’ll want to read the usage docs for more details:You can find the full documentation here:
Hope that this helps and let me know if you have any questions!
Best,
Bobby