• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

Testing interest: Building a high performance, secure, virtualized environment

C

carolina_guy

n00b
Joined
Feb 16, 2014
Messages
32
I was curious if there was interest in the following topic.

I recent did this series documenting a new esxi build (for home server use) that was of interest to many folks. My thinking is there are plenty of folks that know security or networks or VM inside and out, but setting up a complete environment with a DMZ, VLANS, proxy servers, UTM with a fully virtualized server env might be overwhelming to some folks.

Series topics:

-setting up VLANs and DMZ to isolate and segment hosted services (webserver, blue iris video security, openVPN, etc)

-Configuring esxi networking to support the above

-Using a secure web proxy instead of exposing webservers directly to the internet

-Enhancing Wordpress security

-Deploying converged edge security appliance (UTM) from Untangle

-Proving out the performance & scalability of the whole environment using Load Impact or similar tools

Peter Cannell
www.petermcannell.com
 
carolina_guy said:
-Using a secure web proxy instead of exposing webservers directly to the internet
Click to expand...

I'd be curious about performance implications when using a proxy and whether there's actually any quantifiable benefit seeing that web servers are pretty damn secure as is (if properly configured and patched).
 
Thuleman said:
I'd be curious about performance implications when using a proxy and whether there's actually any quantifiable benefit seeing that web servers are pretty damn secure as is (if properly configured and patched).
Click to expand...

Given that the proxy could also be a GLB (global load balancer), none - in fact, tuned correctly with the appropriate auto-scaling systems behind it, it could improve performance.
 
Ok guys, appreciate the feedback and interest. I'll get to work!

As for proxies, I agree that they don't add any perceived latency and in many cases do improve server response. They absolutely will increase security if you enable all the options in nginx. Having sold one of the very first web app firewall (WAF) that is now part of Citrix/Netscaler, I'm aware of L7 security issues. I've also NEVER seen an enterprise customer exposing any WS directly to the internet without some proxy & load balancer (firewall of course)

For performance/stress testing I'll be using a tool from load impact, which generates traffic from Amazon's cloud, wherein I can put load on my firewall, proxy & webserver. You can also overlay server metrics (they have an agent for that) so you can monitor CPU, disk, etc during a test.

Stay tuned.
 
You must log in or register to reply here.
Back
Top