Cloud Firewall for vServers by Netcup

    Hello all,

    I am a new person in the Netcup Community, :)

    My opinion is about Firewall integration. Is there a plan to offer a firewall for VPS/RS from Netcup?

    For example, you could use it to define firewall rules per server in the SCP, open individual ports, open IP ranges, block all ports, etc.

    In my opinion, this is also a very useful feature, as it's independent of the server's OS because it sits "in front" of the VPS/RS on the provider side.

    This feature would, for example, prevent Docker from opening ports without permission. (Docker-UFW Conflict).


    Many providers have this, so why not Netcup, a heavyweight :?:

    Your mind...

    Yeah they really should improve their backend systems. Ideal reference (to learn from) imo would be He..ner workflow, single sign on, comfortable and simple cloud console. Dedicated and cloud servers have good amount of control for Firewall, but only for cloud they allow to have multiple firewalls and no limit on rules.

    Literally makes me want to use netcup less, simply due to lack of additional layer of firewall (especially in case of something like docker breaking all the rules, and generally leaking out a lot of ports), as for everything else, Netcup is great, just one little push more and you'd have perfection.

    Why would you need a firewall on Netcup level by software ( not hardware) if you manage the system yourself and the firewall here is software wise the same?

    If you have risk managing things like docker, use virtualization and manage FW rules between the hosts

    As long firewalls are not hardware based for me it makes no sense to have them in the SCP/outside my RS/VPS

    It is better to have an additional firewall outside of your server, if only to move some load outside your VPS. Your VPS and/or it's firewall does not have to process network traffic that doesn't reach your VPS because it is already blocked by the external firewall. It's also better for security.

    Zitat von DutchmanNL

    Why would you need a firewall on Netcup level by software ( not hardware) if you manage the system yourself and the firewall here is software wise the same?

    If you have risk managing things like docker, use virtualization and manage FW rules between the hosts

    As long firewalls are not hardware based for me it makes no sense to have them in the SCP/outside my RS/VPS

    It does make sense, because even if it's software based (most firewalls are software based, they are just adapted to the specific hardware by the way) you have an additional layer, in case you made an error on your own vps regarding the firewall rules. Almost all cloud providers (not so many vps providers) provide a firewall for their cloud servers.

    He's Network is based on Point To Point. Almost all traffic goes via the gateway.

    Netcup still has some L2 traffic that is not managed by a gateway - e.g. traffic from the same subnet.

    That makes a Firewall harder to implement, even with SDN.

    Zitat von H6G

    He's Network is based on Point To Point. Almost all traffic goes via the gateway.

    Netcup still has some L2 traffic that is not managed by a gateway - e.g. traffic from the same subnet.

    That makes a Firewall harder to implement, even with SDN.

    Yes, but even if the Firewall could notblock traffic from the same subnet it would still be useful. It still could block out unwanted subnets or regions from outside your subnet. Either completely or for specific ports.

    I get it . It's nice.

    But if you setup ufw or iptables or whaterver (ufw is dead simple) and something like cloudflare ( and only allo traffic from your IP and cloudflare ) - you have perfectly secure system. Netcup will already protect you from DDOS if you leak your IP somehow. And ufw and Cloudflare ( or another cloud proxy) will protect you from everything else.