7. Firewall & IPS

As Proxmox is based on a Linux distribution, it natively embeds a software firewall based on IPtables. The hypervisor can use this firewall to protect itself and the cluster it is part of, as well as the virtual machines and containers it hosts. Depending on the perimeter to be protected, rules can be set up differently. An IPS (Intrusion Prevention System) can also be added if required.

Another way to create a high-performance network filtering layer is to create a virtual machine (not a container) for pfSense. This freeware requires very few resources and can satisfy all the network needs of an infrastructure (firewall, IPS, IDS, VPN...) at zero cost. The VM will then have one foot on the Internet and the other on the hypervisor or cluster LAN. In the case of a hypervisor alone, a fictitious network (internal only) will ensure...

You do not have access to this resource.

Exclusive to subscribers. 97% yet to be discovered!

You do not have access to this resource. Click here to request your free trial access!

Already subscribed? Log in!

Ongoing reading
Firewall & IPS