Networking

Secure and control the traffic to your applications with private networking, traffic filtering, and load balancing.

Manage DNS for Droplets, DigitalOcean Load Balancers, and non-DigitalOcean resources all in the same place.
DigitalOcean Floating IPs are publicly-accessible static IP address that you can assign to Droplets and instantly remap to other Droplets in the same datacenter.
Load balancers distribute traffic across pools of Droplets for high availability setups.
Restrict traffic with network-based, stateful firewalls for Droplets.
Compared to IPv4, IPv6 provides a larger address space, increased security, and other benefits. Enable IPv6 on a Droplet to gain access to its 16 configurable IPv6 addresses.
VPC
A Virtual Private Cloud (VPC) is a private network interface for collections of DigitalOcean resources. VPC networks provide a more secure connection between resources because the network is inaccessible from the public internet and other VPC networks.

Latest Updates

Upcoming Changes

  • Starting 1 July 2022, some of our pricing is changing. These changes will go into effect for the July bill which customers wlil receive in the 1 August invoice.

    • We are introducing a new $4 Droplet with 512MB memory, 10GB SSD Disk, 1 vCPU and 500GB of outbound data transfer.

    • We are simplifying pricing for DigitalOcean Kubernetes and some Managed Databases for better accuracy and predictibility.

    • Droplets, Snapshots, Load Balancers, Floating IPs, and Custom Images are increasing in price.

    There is no change to pricing for Spaces, backups, volumes, DigitalOcean Container Registry, or App Platform. There are also no changes to inbound data transfer or bandwidth pricing.

    This is our first major price change in 10 years, and we believe the new model better fits our understanding of our customers and the expanded breadth of our offerings. For a more detailed breakdown of the changes, see our blog post on our new pricing.

15 April 2022

19 January 2022

  • Managed Let’s Encrypt certificates will begin using Elliptic Curve Digital Signature Algorithm (ECDSA) instead of RSA. ECDSA is equally secure and more computationally efficient than RSA. ECDSA certificates follow the shorter root chain and aren’t rooted using the DST Root CA X3 cross-sign which expired on 30 September 2021.

    As we roll out this change, new Let’s Encrypt certificates provisioned for DigitalOcean Load Balancers and Spaces will increasingly use ECDSA and existing certificiates secured with RSA will be secured with ECDSA upon auto-renewal. This change doesn’t require any action from DigitalOcean customers.

10 January 2022

  • You can now resize load balancers once per minute, instead of once per hour. The cost is prorated based on how long the load balancer operates at each size, with a minimum charge of $0.01.

For more information, see the full release notes.