fail2ban and IPtables support
No we don’t bundle fail2ban as we install Ubuntu’s own UFW Firewall already, which is very simple and easy to use. It includes a sort of IPtables function that is very lightweight and self-cleaning logs too. We feel that UFW along with Cloudflare’s own DDOS and other free features are more than adequate for most sites.
If you want to install other security apps like fail2ban you will need to add a custom module (Ubuntu package).