Network

It would be helpful to be able to block traffic from entire countries using the cloud firewall. 90% of the malicious traffic we get is from China, Russia, Brazil, etc. Being able to block at the firewall level would greatly reduce this malicious traffic.

Let me "name" IP addresses that are allowed to access my firewall so I can easily recognize which ones to add/remove/edit. This would be so awesome!!

I have an APP Platform with an application that consumes a database hosted on a Droplet, but when I try to restrict access to the database port using Cloud Firewall, it doesn't recognize APP Platform as a DigitalOcean resource. It only lists other Droplets but not the APP Platform.

Add the ability to create WAF like cloudfare & AWS

Would be very helpful to have a firewall rule that would deny specific IPs. We currently have implement our own blacklist via iptables.

In order to audit current firewall rules it is really awful to go one by one the firewall rule to see which ports are in the rule, and which droplet is associated with it, it must be a way to either view like a spreadsheet wise, or to export the data to be checked offline. thanks, Ignacio

If I close a droplet to public access entirely (ie: production db server) and only allow VPC IP range, the Console Access stops working. I learned the DO Control Panel works on k8s. Either you can assign a VPC range to it and share with us to add firewall or that range can be in the firewall rules by default.

Currently VRRP protocol is not allowed by Cloud Firewall, so having 2 (or more) droplets using KeepAlive works well but when using Cloud Firewall it doesn't works because there is no option to add a rule to Firewall to allow VRRP.

I keep SSH closed when I don't need it, so it'll be convenient if there is a feature to quickly enable and disable rules instead of deleting and creating them.

it'd be tremendously useful to have a comment field for firewall rules in the webui. For example, comment what the hosts/networks are (when the rule was created) or why the rule was added.