For AI agents: The documentation index is at https://docs.digitalocean.com/llms.txt. Markdown versions of pages use the same URL with index.html.md in place of the HTML page (for example, append index.html.md to the directory path instead of opening the HTML document).

Secure and control the traffic to your applications with private networking, traffic filtering, and load balancing.

VPC

A Virtual Private Cloud (VPC) is a private network interface for collections of DigitalOcean resources. VPC networks provide a more secure connection between resources because the network is inaccessible from the public internet and other VPC networks.

Cloud Firewalls

Restrict traffic with network-based, stateful firewalls for Droplets.

Domains and DNS

Manage DNS for Droplets, DigitalOcean Load Balancers, and non-DigitalOcean resources all in the same place.

IPv6

Compared to IPv4, IPv6 provides a larger address space, increased security, and other benefits. Enable IPv6 on a Droplet to gain access to its 16 configurable IPv6 addresses.

Load Balancers

Load balancers distribute traffic across pools of backend resources for high availability setups.

Reserved IPs

DigitalOcean Reserved IPs are publicly-accessible static IP address that you can assign to Droplets and instantly remap to other Droplets in the same datacenter.

DDoS Protection

DigitalOcean DDoS Protection provides free, always-on protection from distributed denial-of-service (DDoS) attacks for applicable DigitalOcean resources.

Latest Updates

10 September 2026

• The DigitalOcean Control Panel now supports adding and removing allow and deny rules based on IP addresses and CIDR ranges when you create or manage regional load balancers that use HTTP or Network traffic management. See How to Create Regional Load Balancers and How to Manage Regional Load Balancers. Global load balancers do not support firewall rules, and DigitalOcean Kubernetes (DOKS)-managed load balancers continue to use Kubernetes service configuration.

4 August 2026

• Cloud firewall rules now support an action of allow or deny. Deny rules let you block traffic from specific sources, such as known malicious IP addresses, while allowing broader access to your services. Deny rules take precedence over allow rules that match the same traffic. For rule actions and configuration steps, see How to Configure Firewall Rules.

9 April 2026

• NAT gateways now provide 2 Gbps of symmetrical bandwidth for each size, up from 25 Mbps. NAT gateways are available in 1-5 size increments and each size increment includes 100 GiB of outbound data transfer per month.

  Read VPC NAT Gateway Features and VPC Pricing for details.

For more information, see the full release notes.