digitalocean-networking — Claude Code skill: usage & install
Network architecture skill for DigitalOcean VPC, firewalls, load balancers, and DNS. Guides your AI agent when segmenting traffic and securing endpoints.
npx skills add bobmatnyc/claude-mpm-skills --skill digitalocean-networking -a claude-codeWhat digitalocean-networking does
This skill injects DigitalOcean network architecture practices into the agent context. It outlines patterns for isolating Droplets, managed databases, and Kubernetes clusters using private VPCs. Compute instances must reside in the exact same region as the target VPC, or private communication will fail.
The guide details stateful firewall rules grouped by protocol and port. It also covers load balancers with health checks and TLS termination, along with reserved IPs for fast failover. Outbound traffic from isolated subnets routes through NAT Gateways.
The skill operates on its own. While companion skills like digitalocean-compute or digitalocean-managed-databases exist, you do not need them to design network topology.
What it helps with
- Segment infrastructure using environment-specific VPCs
- Restrict Droplet ingress and egress traffic via stateful firewalls
- Distribute requests through load balancers with TLS termination
- Maintain static entry points using reserved IPs during migrations
Example prompts for the agent
- Design a VPC layout in DigitalOcean separating web servers from the private database
- Generate firewall rules allowing only HTTP, HTTPS, and restricted SSH access
- Show me how to configure a NAT Gateway for outbound traffic from a private subnet
How to install digitalocean-networking
1Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill digitalocean-networking -a claude-code2Manually: put the files in place
~/.claude/skills/digitalocean-networking/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/digitalocean-networking/
1Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill digitalocean-networking -a codex2Manually: put the files in place
.agents/skills/digitalocean-networking/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill digitalocean-networking -a cursor2Manually: put the files in place
.cursor/skills/digitalocean-networking/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install bobmatnyc/claude-mpm-skills digitalocean-networking2Manually: put the files in place
.github/skills/digitalocean-networking/SKILL.md1Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill digitalocean-networking -a gemini-cli2Platform CLI
gemini skills install https://github.com/bobmatnyc/claude-mpm-skills --path toolchains/platforms/deployment/digitalocean-networkingManually: put the files in place
.devin/skills/digitalocean-networking/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill digitalocean-networking -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about digitalocean-networking
How to install digitalocean-networking in Claude Code?
Run npx skills add bobmatnyc/claude-mpm-skills --skill digitalocean-networking -a claude-code. The file will be placed in ~/.claude/skills/digitalocean-networking/SKILL.md.
What does the digitalocean-networking skill do?
It teaches coding agents how to structure DigitalOcean networking. This covers VPC segmentation, firewall filtering, load balancing, DNS routing, and NAT Gateways.
Are other DigitalOcean skills required for this to work?
No, complementary skills are optional. The networking skill contains all instructions needed for network design on its own.
Source text
SKILL.md · MIT
---
name: digitalocean-networking
description: DigitalOcean networking services including VPC, firewalls, load balancers, reserved IPs, DNS, IPv6, and NAT gateway. Use when designing or securing network connectivity for DigitalOcean workloads.
user-invocable: false
disable-model-invocation: true
progressive_disclosure:
entry_point:
summary: "DigitalOcean networking services including VPC, firewalls, load balancers, reserved IPs, DNS, IPv6, and NAT gateway. Use when designing or securing network connectivity for DigitalOcean workloads."
when_to_use: "When working with version control, branches, or pull requests."
quick_start: "1. Review the core concepts below. 2. Apply patterns to your use case. 3. Follow best practices for implementation."
---
# DigitalOcean Networking Skill
---
progressive_disclosure:
entry_point:
summary: "DigitalOcean networking: VPC, firewalls, load balancers, reserved IPs, DNS, IPv6, NAT gateway."
when_to_use:
- "When designing private networks or segmentation"
- "When securing inbound and outbound traffic"
- "When configuring load balancing and DNS"
quick_start:
- "Create a VPC for private traffic"
- "Apply firewalls to compute"
- "Attach load balancers and reserved IPs"
- "Configure DNS records"
token_estimate:
entry: 90-110
full: 3800-5000
---
## Overview
DigitalOcean networking services secure and control traffic with VPC networking, firewalls, load balancing, DNS, IPv6, and reserved IPs.
## VPC
Use VPC to create private network segments for Droplets, Kubernetes, and managed databases.
- Create a VPC in the same region as compute resources.
- Attach resources that need private communication.
## Firewalls
Use stateful firewalls to restrict inbound and outbound traffic.
- Define inbound and outbound rules by protocol and port.
- Apply rules to Droplets and other resources.
## Load Balancers
Use load balancers to distribute traffic across backend resources.
- Configure health checks and target pools.
- Terminate TLS and forward to backend services.
## Reserved IPs
Use reserved IPs to keep stable public endpoints.
- Assign reserved IPs to Droplets.
- Remap IPs during failover or migration.
## DNS and IPv6
- Manage DNS records for DigitalOcean and external resources.
- Enable IPv6 for dual-stack support.
## NAT Gateway
Use NAT Gateway for outbound connectivity from private subnets.
## Networking Workflow
- Create a VPC per environment.
- Attach compute and databases to the VPC.
- Apply firewalls to limit inbound access.
- Add load balancers for public entry points.
- Configure DNS and reserved IPs for stable routing.
## Complementary Skills
When using this skill, consider these related skills (if deployed):
- **digitalocean-compute**: Droplets, App Platform, and Kubernetes placement.
- **digitalocean-managed-databases**: Private database connectivity.
- **digitalocean-management**: Monitoring and uptime checks.
*Note: Complementary skills are optional. This skill is fully functional without them.*
## Resources
**DigitalOcean Docs**:
- Networking: https://docs.digitalocean.com/products/networking/
- VPC: https://docs.digitalocean.com/products/networking/vpc/
- Firewalls: https://docs.digitalocean.com/products/networking/firewalls/
- Load Balancers: https://docs.digitalocean.com/products/networking/load-balancers/
- Reserved IPs: https://docs.digitalocean.com/products/networking/reserved-ips/
- DNS: https://docs.digitalocean.com/products/networking/dns/
- IPv6: https://docs.digitalocean.com/products/networking/ipv6/
- NAT Gateway: https://docs.digitalocean.com/products/networking/vpc/how-to/create-nat-gateway/
© bobmatnyc · MIT · bobmatnyc/claude-mpm-skills