5 ms·
How is their current private networking offering not 'real'?
by CoachRufus87 11y ago
How is their current private networking offering not 'real'?
- vruiz 11y agoIt's private as in only for customers (not exposed to the internet), not private as in only for you.
- brianwawok 11y agoAny other digital ocean server in the same datacenter can hit your private IP.
- CoachRufus87 11y agoWould you consider that to be a big enough risk to not deploy production apps in their environment? I.e. having your app on 1 droplet and a dedicated db on another. I'm new to ops and trying to learn all that I can :)
- brianwawok 11y agoI do this in prod, you just need to take extra steps to protect. i.e. make a firewall rule on the database to only allow access to the database port on your private network card, from your specific web IPs (and make sure the traffic is encrypted).
- CoachRufus87 11y agoThanks for the info!
- jlgaddis 11y agoI'd probably create static ARP entries as well.