With the addition of Virtual Private Cloud feature in DigitalOcean, pfsense can be a great gateway and firewall to protect your droplets in a private isolated network.