5 ms·
This is why I like to use both a host-based firewall __as well as__ a network-based firewall. For the VPS's that I have running on the internet, I always use th
by amanzi 6y ago
This is why I like to use both a host-based firewall __as well as__ a network-based firewall. For the VPS's that I have running on the internet, I always use the hosting provider's firewall offering in addition to iptables (or ufw).
- MaxBarraclough 6y agoThis is something AWS gets right, and Digital Ocean and Linode both get wrong (they offer no cloud firewall of any sort, to my knowledge). It should be trivial for me to lock down the ports of my instance, from the VPS web UI. AWS lets me create a new instance which is entirely closed to incoming connections except for port 22, which is closed except for whitelisting my IP address. This gives me good assurances even if my instance is running a vulnerable SSH server. It's also trivial to block outgoing connections, where that's appropriate. It also means my instance is spared from constant probing, which keeps the logs clear.
- nickjj 6y ago> Digital Ocean and Linode both get wrong (they offer no cloud firewall of any sort, to my knowledge) DO has had a cloud firewall for a while now (a year or 2?) https://www.digitalocean.com/docs/networking/firewalls/ https://www.digitalocean.com/docs/networking/firewalls/. It's free too. Looks like Linode has one coming soon https://www.linode.com/products/firewall/ https://www.linode.com/products/firewall/.
- MaxBarraclough 6y agoThat's good news, thanks.
- amanzi 6y agoI mainly use Vultr for low cost VPS's and they also have had a firewall service for quite a while too.
- c17r 6y agoThanks for pointing this out, I just setup the DO firewall on my account.