This way, we could simply use Private IPs and park the SQL Servers and sensitive data behind the FW - and have the Virtual Router be the border control w/ Static NATs to other machines when necessary.
Vyatta is an enterprise-grade FW with BGB, MPLS, VPN, etc. support - which would expand the use of Digital Ocean cloud further into small business / enterprise level, and not just developers.
As a second suggestion to my first one above, it'd be nice to allow us to Group VM's, where all the Public IP's assigned to VM's are available to any VM in the pool...
Main idea behind this is, since we now have a Virtual Firewall (my initial request) - if we have 4 machines in the group, we could take their Public IP's and attach them all to the firewall VM, and rely only on private IP's on the machines.
This way you still limit us to 1 Public IP per VM (considering they are so scarce nowadays) - but we can attach all of them to 1 VM within the group - benefiting in multiple ways.
Just a thought ;)