<!DOCTYPE html PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'>
<html>
<head>
<meta http-equiv='Content-Type' content='text/html;charset=us-ascii'>
<style>BODY{font:10pt Tahoma, Verdana, sans-serif;}</style>
</head>
<body>
Hello,<br><br>Now I wonder 2 questions:<br>1) Is it true I cant use (bridged) openvz for my firewall VE, because it openvz uses same kernel as host ? <br>2) Is there any risk of bottleneck for my complete box ? Actually I use a bonded 2x100mb/s for the host connexion. Im scared the internal connection of the firewallVE would cap all my traffic ?<br><br>Thanks,<br>Elmer<br><blockquote style="border-left: 2px solid rgb(0, 0, 255); padding-left: 5px; margin-left: 5px; margin-right: 0px;"><hr><b>From:</b> elmer@leet.la<br><b>To:</b> pve-user@pve.proxmox.com<br><b>Sent:</b> Tue, 04 Nov 2008 18:20:23 +0100<br><b>Subject:</b> Re: [PVE-User] Public ip on PVE<br><br>
For people who would like to do same thing, I just found <br><a href="https://db.usenix.org/publications/login/2005-12/pdfs/prevelakis.pdf" target="_blank">https://db.usenix.org/publications/login/2005-12/pdfs/prevelakis.pdf</a><br>It exactly realizes my idea, but within a Vmware virtual machine.<br><br> _____ <br>From: <a href="mailto:elmer@leet.la">elmer@leet.la</a><br>To: <a href="mailto:pve-user@pve.proxmox.com">pve-user@pve.proxmox.com</a><br>Sent: Tue, 04 Nov 2008 16:30:41 +0100<br>Subject: Re: [PVE-User] Public ip on PVE<br><br>Has nobody any idea ?<br><br>Thank you<br><br> _____ <br>From: <a href="mailto:elmer@leet.la">elmer@leet.la</a><br>To: Martin Maurer [mailto:<a href="mailto:martin@proxmox.com">martin@proxmox.com</a>], proxmoxve [mailto:<a href="mailto:pve-user@pve.proxmox.com">pve-user@pve.proxmox.com</a>]<br>Sent: Tue, 04 Nov 2008 10:09:42 +0100<br>Subject: Re: [PVE-User] Public ip on PVE<br><br> <br> <br><br><br>Thanks, im aware of this Fridu page. (By the<br>way, if Fridu is on this mailing list, I say thanks for all his sharing and<br>help to the community).<br>Im already running a small firewall on the host: firehol. It works well, im<br>using it since several years on my 3 boxes.<br>But here, id like to use a dedicated firewall distribution like zeroshell,<br>untangle or ipcop. More powerfull and complete. <br> _____ <br>From: Martin Maurer [mailto:<a href="mailto:martin@proxmox.com">martin@proxmox.com</a>]<br>To: <a href="mailto:elmer@leet.la">elmer@leet.la</a>, proxmoxve [mailto:<a href="mailto:pve-user@pve.proxmox.com">pve-user@pve.proxmox.com</a>]<br>Sent: Tue, 04 Nov 2008 09:21:03 +0100<br>Subject: RE: [PVE-User] Public ip on PVE<br><br>See the firewall scripts from fridu!<br><a href="http://pve.proxmox.com/wiki/Installation#Networking_and_Firewall" target="_blank">http://pve.proxmox.com/wiki/Installation#Networking_and_Firewall</a><br><br>(Proxmox VE will include a firewall in one of the upcoming versions next year, see <a href="http://pve.proxmox.com/wiki/Roadmap" target="_blank">http://pve.proxmox.com/wiki/Roadmap</a>)<br><br>Best Regards,<br><br>Martin Maurer<br><br>> -----Original Message-----<br>> From: <a href="mailto:pve-user-bounces@pve.proxmox.com">pve-user-bounces@pve.proxmox.com</a> [mailto:pve-user-<br>> <a href="mailto:bounces@pve.proxmox.com">bounces@pve.proxmox.com</a>] On Behalf Of <a href="mailto:elmer@leet.la">elmer@leet.la</a><br>> Sent: Dienstag, 04. November 2008 09:10<br>> To: proxmoxve<br>> Subject: [PVE-User] Public ip on PVE<br>> <br>> Hello,<br>> <br>> Is it possible to set the public ip to a bridged VE? And the host would<br>> have just a private ip.<br>> My purpose is to set a firewall into a VE to protect all the others VE<br>> and the host itself. So i would set the public ip & a private ip to a<br>> "firewall VE".<br>> <br>> Internet ---> VE Firewall ---> Others VE & Host.<br>> <br>> I hope i was clear enough. Thanks.<br>> <br>> Elmer<br>> _______________________________________________<br>> pve-user mailing list<br>> <a href="mailto:pve-user@pve.proxmox.com">pve-user@pve.proxmox.com</a><br>> <a href="http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user" target="_blank">http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user</a><br>_______________________________________________<br>pve-user mailing list<br><a href="mailto:pve-user@pve.proxmox.com">pve-user@pve.proxmox.com</a><br><a href="http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user" target="_blank">http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user</a><br></blockquote><style>
BODY {font:10pt Tahoma,Verdana,sans-serif;}
</style>
</body></html>