7. Firewall & IPS
As Proxmox is based on a Linux distribution, it natively embeds a software firewall based on IPtables. The hypervisor can use this firewall to protect itself and the cluster it is part of, as well as the virtual machines and containers it hosts. Depending on the perimeter to be protected, rules can be set up differently. An IPS (Intrusion Prevention System) can also be added if required.
Another way to create a high-performance network filtering layer is to create a virtual machine (not a container) for pfSense. This freeware requires very few resources and can satisfy all the network needs of an infrastructure (firewall, IPS, IDS, VPN...) at zero cost. The VM will then have one foot on the Internet and the other on the hypervisor or cluster LAN. In the case of a hypervisor alone, a fictitious network (internal only) will ensure...
Exclusive to subscribers. 97% yet to be discovered!
Already subscribed? Log in!
Firewall & IPS
High availability
Bibliography
- (1) - Wikipedia - split-brain. - https://fr.wikipedia.org/wiki/Split-brain
- (2) - CEPH - Documentation avancée. -
Exclusive to subscribers. 97% yet to be discovered!
Already subscribed? Log in!
Article included in this offer
"Security of information systems"
(
92 articles
)
Updated and enriched with articles validated by our scientific committees
A set of exclusive tools to complement the resources
