Running your SaaS on a budget VPS might seem like a smart, cost-effective choice, but it's a bit like leaving your front door wide open in a sketchy neighborhood. Most budget VPS providers come with zero security configurations by default. That means unless you take action, you're essentially inviting bad actors to have a go at your server.

Why you need a firewall now

Without a firewall, your VPS is exposed to the world. Hackers can easily find vulnerabilities in your system, and if you're not prepared, that $5 VPS could end up costing you way more in damages. Setting up a firewall is like having a digital bouncer—only the right traffic gets in, and everything else gets kicked to the curb.

Let's look at a super simple way to secure your VPS using Uncomplicated Firewall (UFW), a straightforward yet powerful tool for managing access to your server.

Securing your VPS in 5 simple steps

In just a few minutes and with a few commands, you can lock down your server from unwanted access. Here's how you can go from exposed to secured:

1. Install UFW (Uncomplicated Firewall)

First, install UFW. It's available in most Linux distributions, and it's easy to use:

sudo apt install ufw

2. Allow SSH access (port 22)

Since you need SSH to access your server remotely, the next step is to allow traffic on port 22 for OpenSSH:

sudo ufw allow 'OpenSSH'

3. (Optional) Allow web traffic (ports 80 and 443)

If your VPS hosts a web server, you'll want to allow traffic through ports 80 (HTTP) and 443 (HTTPS):

sudo ufw allow 'Nginx Full'

4. Set default rules: allow all outgoing traffic

This rule allows your server to send outbound requests freely, which is necessary for most services:

sudo ufw default allow outgoing

5. Deny all incoming traffic by default

This rule blocks all incoming traffic unless you explicitly allow it, protecting your server from unauthorized access:

sudo ufw default deny incoming

6. Enable the firewall

Now that the rules are in place, it's time to activate the firewall:

sudo ufw enable

That's It! Your VPS is Now Secured 🔒

With these 5 simple commands, you've added a crucial layer of security to your VPS. It's not a perfect shield—no security solution is—but it's an essential first step to ensure your SaaS isn't a sitting duck.

By taking these precautions, you can run your SaaS with peace of mind, knowing that you've closed off easy entry points for attackers. Want to dive deeper into VPS security? Stay tuned for more tips!

source