[PVE-User] Internet facing Proxmox

2014-09-14 Thread Gerald Brandt

Hi,

I've been asked to set up a Proxmox server on the Internet.  Has anybody 
done so, and how secure is the web interface on port 8006?


I was considering running a VPN on Proxmox, and not allowing port 8006 
access unless you were connected to the VPN.  That creates issues if the 
VPN server goes down.


Also, with the new built in firewall, how easy is it to run all VPN's on 
a private address space and port forward as needed?


Gerald

___
pve-user mailing list
pve-user@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user


Re: [PVE-User] Internet facing Proxmox

2014-09-14 Thread ad...@extremeshok.com
You don't need a VPN 

Follow the guides on my site this will give you a secure and optimized proxmox.

Set proxmox admin interface to only listen locally (127.0.0.1) and connect via 
an ssh tunnel to port 8006.

No offense, but this should be standard knowledge for an admin.


Guides on https://extremeshok.com/blog 

Sent from my iPhone

 On 14 Sep 2014, at 6:44 PM, Bart Lageweg | Bizway b...@bizway.nl wrote:
 
 Hi Gerald,
 
 Use Eth0 for internal network + VPN access.
 Use Eth1 for internet access (no IP in interface, only create for bridge)
 
 Goodluck
 
 Bart
 
 
 -Oorspronkelijk bericht-
 Van: pve-user [mailto:pve-user-boun...@pve.proxmox.com] Namens Gerald Brandt
 Verzonden: zondag 14 september 2014 18:41
 Aan: pve-user@pve.proxmox.com
 Onderwerp: [PVE-User] Internet facing Proxmox
 
 Hi,
 
 I've been asked to set up a Proxmox server on the Internet.  Has anybody done 
 so, and how secure is the web interface on port 8006?
 
 I was considering running a VPN on Proxmox, and not allowing port 8006 access 
 unless you were connected to the VPN.  That creates issues if the VPN server 
 goes down.
 
 Also, with the new built in firewall, how easy is it to run all VPN's on a 
 private address space and port forward as needed?
 
 Gerald
 
 ___
 pve-user mailing list
 pve-user@pve.proxmox.com
 http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
 ___
 pve-user mailing list
 pve-user@pve.proxmox.com
 http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
___
pve-user mailing list
pve-user@pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user