For AI agents: The documentation index is at https://docs.digitalocean.com/llms.txt. Markdown versions of pages use the same URL with index.html.md in place of the HTML page (for example, append index.html.md to the directory path instead of opening the HTML document).

August 2026

4 August

• Cloud firewall rules now support an action of allow or deny. Deny rules let you block traffic from specific sources, such as known malicious IP addresses, while allowing broader access to your services. Deny rules take precedence over allow rules that match the same traffic. For rule actions and configuration steps, see How to Configure Firewall Rules.

March 2026

31 March

• Control plane firewalls for DigitalOcean Kubernetes are now in general availability. Control plane firewalls restrict access to your cluster’s API server to a set of allowed IP addresses. Worker node IPs are automatically kept in sync as nodes scale up or down.

  You can enable control plane firewalls using the DigitalOcean API, doctl, or Terraform.

June 2024

27 June

• Control plane firewalls are now available in early availability for select DOKS customers. For more information, see How to Add a Control Plane Firewall.

July 2023

1 July

• We no longer bill for outbound data transfer that we determine is dropped by a DigitalOcean firewall rule. Learn more about bandwidth billing.

August 2021

3 August

• You can now add Kubernetes clusters as sources or destinations in Cloud Firewall rules.

October 2020

27 October

• On Kubernetes 1.19 and later we now provision two fully-managed firewalls for each new Kubernetes cluster. One firewall manages the connection between worker nodes and control plane, and the other manages connections between worker nodes and the public internet.