4 ms·
The problem on DO is not outside tradfic but insode. when you enable networking everyone in the same DC network can access open ports on your machines. That ela
by beberlei 9y ago
The problem on DO is not outside tradfic but insode. when you enable networking everyone in the same DC network can access open ports on your machines. That elastixsearxh or redis you use needs ssl and pw protection otherwise you have a big problem
- rescbr 9y agoThere's IPsec, although you are now trading VPC costs with sysadmin overhead costs.
- tyingq 9y agoOvh might be good cheap alternative if you have that need. They have a virtual rack product that's much closer to a VPC.
- closeparen 9y agoYou can configure the cloud firewall so that only VMs in your account with a certain tag can communicate, even over the internal network. Public network + firewall feels dirtier than private network, but in reality they are the same thing: a network that’s only accessible to your VMs, to the extent that you trust the provider’s software to enforce that boundary.