[ovirt-users] Re: VM Portal on a stand alone server

2020-07-16 Thread Gal Villaret 
Thanks.

Using a proxy is my plan.
I was asked by my security team to add some more "distance" from users to
the server running the engine and the database.
Coming to think of it, maybe deploying the DB on a standalone server is a
better approach.







On Wed, Jul 15, 2020 at 10:08 PM Michal Skrivanek <
michal.skriva...@redhat.com> wrote:

>
>
> On 15 Jul 2020, at 17:12, Gal Villaret  wrote:
>
> I have the engine running on a dedicated server.
>
> I would like to separate the VM Portal to another server or maybe have
> another instance of VM portal on another server.
>
> The idea is to be able to put the VM Portal on a different subnet and to
> put a firewall between it and the engine.
>
>
> it’s possible in devel mode, see docker container at
> https://github.com/oVirt/ovirt-web-ui
> but we’re not really updating it very often, I wouldn’t recommend it for
> production
>
> What’s the concern if you limit access to :443 and use a proxy? There’s
> not much more a random joe can do without a permission to log into
> webadmin, there’s just a static landing page with few links.
>
>
> Thanks.
>
> On Wed, Jul 15, 2020, 17:18 Sandro Bonazzola  wrote:
>
>>
>>
>> Il giorno mer 15 lug 2020 alle ore 12:26  ha
>> scritto:
>>
>>> Hi Folks,
>>>
>>> I'm rather new to oVirt and loving it.
>>> running 4.4.1.
>>> I would like to be able to run the VM Portal on a stand-alone server for
>>> security concerns.
>>>
>>> Can anyone point in the right direction for achieving this?
>>>
>>
>> Can you please elaborate?
>> Are you asking for having the admin portal and the VM user portal running
>> on 2 different servers?
>> Or running the engine on a dedicated server instead of on self hosted
>> engine VM?
>>
>>
>>
>>
>>>
>>> Thanks,
>>>
>>> Gal Villaret
>>> ___
>>> Users mailing list -- users@ovirt.org
>>> To unsubscribe send an email to users-le...@ovirt.org
>>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>>> oVirt Code of Conduct:
>>> https://www.ovirt.org/community/about/community-guidelines/
>>> List Archives:
>>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3BE6CNDNLDKZQW5ANOC3UFT3BQZZFGHC/
>>>
>>
>>
>> --
>> Sandro Bonazzola
>> MANAGER, SOFTWARE ENGINEERING, EMEA R RHV
>>
>> Red Hat EMEA 
>> sbona...@redhat.com
>> 
>>
>> *Red Hat respects your work life balance. Therefore there is no need to
>> answer this email out of your office hours.
>> *
>>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EDCHL6QLGDWU2GASCOXHC4B3DFHJNPBC/
>
>
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/W7S2KFDTCRV3HDV5MYQQTPID2ZWMLLCX/

[ovirt-users] Re: VM Portal on a stand alone server

2020-07-15 Thread Michal Skrivanek 


> On 15 Jul 2020, at 17:12, Gal Villaret  wrote:
> 
> I have the engine running on a dedicated server.
> 
> I would like to separate the VM Portal to another server or maybe have 
> another instance of VM portal on another server.
> 
> The idea is to be able to put the VM Portal on a different subnet and to put 
> a firewall between it and the engine.

it’s possible in devel mode, see docker container at 
https://github.com/oVirt/ovirt-web-ui
but we’re not really updating it very often, I wouldn’t recommend it for 
production

What’s the concern if you limit access to :443 and use a proxy? There’s not 
much more a random joe can do without a permission to log into webadmin, 
there’s just a static landing page with few links.

> 
> Thanks. 
> 
> On Wed, Jul 15, 2020, 17:18 Sandro Bonazzola  > wrote:
> 
> 
> Il giorno mer 15 lug 2020 alle ore 12:26  > ha scritto:
> Hi Folks, 
> 
> I'm rather new to oVirt and loving it. 
> running 4.4.1. 
> I would like to be able to run the VM Portal on a stand-alone server for 
> security concerns. 
> 
> Can anyone point in the right direction for achieving this? 
> 
> Can you please elaborate?
> Are you asking for having the admin portal and the VM user portal running on 
> 2 different servers?
> Or running the engine on a dedicated server instead of on self hosted engine 
> VM?
> 
> 
>  
> 
> Thanks, 
> 
> Gal Villaret
> ___
> Users mailing list -- users@ovirt.org 
> To unsubscribe send an email to users-le...@ovirt.org 
> 
> Privacy Statement: https://www.ovirt.org/privacy-policy.html 
> 
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/ 
> 
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3BE6CNDNLDKZQW5ANOC3UFT3BQZZFGHC/
>  
> 
> 
> 
> -- 
> Sandro Bonazzola
> MANAGER, SOFTWARE ENGINEERING, EMEA R RHV
> Red Hat EMEA 
> sbona...@redhat.com    
>  
> Red Hat respects your work life balance. Therefore there is no need to answer 
> this email out of your office hours.
>  
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct: 
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives: 
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/EDCHL6QLGDWU2GASCOXHC4B3DFHJNPBC/

___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/LRELPGG4GFRDX4NAYARVT4IFBT6QXBL2/

[ovirt-users] Re: VM Portal on a stand alone server

2020-07-15 Thread Gal Villaret 
I have the engine running on a dedicated server.

I would like to separate the VM Portal to another server or maybe have
another instance of VM portal on another server.

The idea is to be able to put the VM Portal on a different subnet and to
put a firewall between it and the engine.

Thanks.

On Wed, Jul 15, 2020, 17:18 Sandro Bonazzola  wrote:

>
>
> Il giorno mer 15 lug 2020 alle ore 12:26  ha
> scritto:
>
>> Hi Folks,
>>
>> I'm rather new to oVirt and loving it.
>> running 4.4.1.
>> I would like to be able to run the VM Portal on a stand-alone server for
>> security concerns.
>>
>> Can anyone point in the right direction for achieving this?
>>
>
> Can you please elaborate?
> Are you asking for having the admin portal and the VM user portal running
> on 2 different servers?
> Or running the engine on a dedicated server instead of on self hosted
> engine VM?
>
>
>
>
>>
>> Thanks,
>>
>> Gal Villaret
>> ___
>> Users mailing list -- users@ovirt.org
>> To unsubscribe send an email to users-le...@ovirt.org
>> Privacy Statement: https://www.ovirt.org/privacy-policy.html
>> oVirt Code of Conduct:
>> https://www.ovirt.org/community/about/community-guidelines/
>> List Archives:
>> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3BE6CNDNLDKZQW5ANOC3UFT3BQZZFGHC/
>>
>
>
> --
>
> Sandro Bonazzola
>
> MANAGER, SOFTWARE ENGINEERING, EMEA R RHV
>
> Red Hat EMEA 
>
> sbona...@redhat.com
> 
>
> *Red Hat respects your work life balance. Therefore there is no need to
> answer this email out of your office hours.
> *
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/EDCHL6QLGDWU2GASCOXHC4B3DFHJNPBC/

[ovirt-users] Re: VM Portal on a stand alone server

2020-07-15 Thread Sandro Bonazzola 
Il giorno mer 15 lug 2020 alle ore 12:26  ha
scritto:

> Hi Folks,
>
> I'm rather new to oVirt and loving it.
> running 4.4.1.
> I would like to be able to run the VM Portal on a stand-alone server for
> security concerns.
>
> Can anyone point in the right direction for achieving this?
>

Can you please elaborate?
Are you asking for having the admin portal and the VM user portal running
on 2 different servers?
Or running the engine on a dedicated server instead of on self hosted
engine VM?




>
> Thanks,
>
> Gal Villaret
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/3BE6CNDNLDKZQW5ANOC3UFT3BQZZFGHC/
>


-- 

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R RHV

Red Hat EMEA 

sbona...@redhat.com


*Red Hat respects your work life balance. Therefore there is no need to
answer this email out of your office hours.
*
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/users@ovirt.org/message/M3BV5XHRODSS3WN7ZIY7B4XMBSCBCXMR/