• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

virtualization and security

ndruw

Limp Gawd
Joined
Mar 7, 2006
Messages
246
OK, I'm going off to college soon, and I wanted to build a small server for file storage and testing (Apache and MySQL, I'm really getting into web design). Long story short, I want to be able to have an internal server (for files and testing - Apache and MySQL included) and an external server (Apache and MYSQL as well, for serving pages to friends on the outside and such, and also VPN) on the same box.

My question is: Would setting up 2 different server in VMWare the best way to keep these server separate and secure?

OS Note: I plan on using Debian for pretty much everything in this project.
 
There are several ways it can be done. VMWare is certainly one way, and is probably the most secure, given the servers will run incompletely separate environments. Other options would be to run multiple instances of Apache, each bound to separate ports (see the Listen directive), or to run a single instance of Apache but use VirtualHosts to separate the sites.
 
thanks for the idea of using the virtual hosts in apache - that'll save quite a few CPU cycles... ;)
 
If you really want the two instances to be totally seperate for security reasons then I would strongly suggest looking into Xen. I am working on combinging my Asterisk Server, File server and home web server into a single box. Xen is MUCH more efficient at virtualization than VMWare because it actually mods the kernel with the Hypervisor callbacks where VMWare runs in almost all user space. Right now it only runs open-source OS's that you can patch and rebuild yourself. Actually with the hardware virtualization in the Pentum D's there are reports of people running Windows as a Xen Domain.

Check it out here!

It is VERY compatible with Debian, checkout the Wiki and there are tons of walkthroughs. I would highly recommend it to keep the internal/external services totally segregated. Give it a shot!

Burke
 
Back
Top