Cloud Firewalls
Generated on 3 Jul 2026
DigitalOcean Cloud Firewalls are a network-based, stateful firewall service for Droplets provided at no additional cost. Cloud firewalls block all traffic that isn’t expressly permitted by a rule.
Getting Started
Quickstarts and intermediate tutorials to get started.
How-Tos
How to accomplish specific tasks in detail, like creation/deletion, configuration, and management.
Reference
Native and third-party tools, troubleshooting, and answers to frequently asked questions.
Concepts
Explanations and definitions of core concepts in Firewalls.
Details
Features, plans and pricing, availability, limits, known issues, and more.
Support
Get help with technical support and answers to frequently asked questions.
Latest Updates
31 March 2026
-
Control plane firewalls for DigitalOcean Kubernetes are now in general availability. Control plane firewalls restrict access to your cluster’s API server to a set of allowed IP addresses. Worker node IPs are automatically kept in sync as nodes scale up or down.
You can enable control plane firewalls using the DigitalOcean API, doctl, or Terraform.
27 June 2024
-
Control plane firewalls are now available in early availability for select DOKS customers. For more information, see How to Add a Control Plane Firewall.
1 July 2023
-
We no longer bill for outbound data transfer that we determine is dropped by a DigitalOcean firewall rule. Learn more about bandwidth billing.
For more information, see all Cloud Firewalls release notes.