Firewalls Release Notes

Validated on 31 Mar 2026

March 2026

31 March

• Control plane firewalls for DigitalOcean Kubernetes are now in general availability. Control plane firewalls restrict access to your cluster’s API server to a set of allowed IP addresses. Worker node IPs are automatically kept in sync as nodes scale up or down.

  You can enable control plane firewalls using the DigitalOcean API, doctl, or Terraform.

June 2024

27 June

• Control plane firewalls are now available in early availability for select DOKS customers. For more information, see How to Add a Control Plane Firewall.

July 2023

1 July

• We no longer bill for outbound data transfer that we determine is dropped by a DigitalOcean firewall rule. Learn more about bandwidth billing.

August 2021

3 August

• You can now add Kubernetes clusters as sources or destinations in Cloud Firewall rules.

October 2020

27 October

• On Kubernetes 1.19 and later we now provision two fully-managed firewalls for each new Kubernetes cluster. One firewall manages the connection between worker nodes and control plane, and the other manages connections between worker nodes and the public internet.