• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Colocated XenServer with single IP

W

wizdum

[H]ard|Gawd
Joined
Sep 22, 2010
Messages
1,943
I'm looking for guidance on a potential Xenserver setup. I have a fairly beefy webserver that is currently hosted in a colo with a single public IP address. I'd like to install Xenserver on it, virtualize the webserver part, and set up a couple other VMs on it. Is this even possible without external hardware? I imagine I would need to set up some kind of virtual router to make it work. Is it even safe to have a publicly route-able XenServer management interface?
 
You can have untangle or pfSense as a virtual router. I would shy away from having the management ports open to the world. Maybe a vpn connection in to a machine behind the firewall to manage the VM's?
 
TType85 said:
You can have untangle or pfSense as a virtual router. I would shy away from having the management ports open to the world. Maybe a vpn connection in to a machine behind the firewall to manage the VM's?
Click to expand...

Thats what I was thinking. Something that would let me give all the VMs a private address, that is routed to the public address. I may be able to convince them to let me put a Ubiquiti Edgerouter (just because i'm familiar with them and the ER-Lite has a pretty small footprint) in front of it if I can't get a virtual solution. I imagine this would be the "normal" setup for a public VM host? As it sits now, my box is in the DMZ, so the only firewall I have is the linux software firewall.
 
wizdum said:
Thats what I was thinking. Something that would let me give all the VMs a private address, that is routed to the public address. I may be able to convince them to let me put a Ubiquiti Edgerouter (just because i'm familiar with them and the ER-Lite has a pretty small footprint) in front of it if I can't get a virtual solution. I imagine this would be the "normal" setup for a public VM host? As it sits now, my box is in the DMZ, so the only firewall I have is the linux software firewall.
Click to expand...

The way we have ours set up right now is our network connection comes in to a physical pfsense box then out to our vm servers. I have a ipsec vpn tunnel back to the office for management and access for the users in the office. The public ip's are firewalled so only port 80/443 are open to the outside.
 
You must log in or register to reply here.
Back
Top