I'm looking for guidance on a potential Xenserver setup. I have a fairly beefy webserver that is currently hosted in a colo with a single public IP address. I'd like to install Xenserver on it, virtualize the webserver part, and set up a couple other VMs on it. Is this even possible without external hardware? I imagine I would need to set up some kind of virtual router to make it work. Is it even safe to have a publicly route-able XenServer management interface?
![[H]ard|Forum](/styles/hardforum/xenforo/logo_dark.png){kind=logo}
Navigation
Install the app
How to install the app on iOS
Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
More options
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.
You should upgrade or use an alternative browser.
Colocated XenServer with single IP
- Thread starter wizdum
- Start date
You can have untangle or pfSense as a virtual router. I would shy away from having the management ports open to the world. Maybe a vpn connection in to a machine behind the firewall to manage the VM's?
Thats what I was thinking. Something that would let me give all the VMs a private address, that is routed to the public address. I may be able to convince them to let me put a Ubiquiti Edgerouter (just because i'm familiar with them and the ER-Lite has a pretty small footprint) in front of it if I can't get a virtual solution. I imagine this would be the "normal" setup for a public VM host? As it sits now, my box is in the DMZ, so the only firewall I have is the linux software firewall.
Thats what I was thinking. Something that would let me give all the VMs a private address, that is routed to the public address. I may be able to convince them to let me put a Ubiquiti Edgerouter (just because i'm familiar with them and the ER-Lite has a pretty small footprint) in front of it if I can't get a virtual solution. I imagine this would be the "normal" setup for a public VM host? As it sits now, my box is in the DMZ, so the only firewall I have is the linux software firewall.
The way we have ours set up right now is our network connection comes in to a physical pfsense box then out to our vm servers. I have a ipsec vpn tunnel back to the office for management and access for the users in the office. The public ip's are firewalled so only port 80/443 are open to the outside.