<div dir="ltr">Eneko,<div><br></div><div>Thanks for the reply. I'm not familiar with Firewall Builder but I'll be sure to take a look at it. I kind of like the idea of doing the firewalling and routing on the host as it just seems cleaner or simpler. I had been thinking about running pfSense in a VM as that's what I have the most experience with and FreeBSDs firewall capablilities have always seemed a little more mature than Linux's ipfwadmn, I mean ipchains, I mean iptables, or is it nftables now, oh and you can't forget about ebtables (I'm joking it's just fun to poke fun at all the choice sometimes and I've been using Linux long enough to remember all of the solutions).</div>
<div><br></div><div>Seeing as I don't need anything too extravagant maybe I'll just stick to a host based solution. After a cursory look at Firewall Builder it's probably all I need. A full pfSense VM would probably be overkill. Plus, I could use a refresher on Linux's firewall capabilities. </div>
<div><br></div><div>All that leaves is a OpenVPN server. As far as that goes where do you run your VPN (assuming you use one at all)? Do you run it on the Proxmox host, in a container, or a full blown VM?</div><div><br></div>
<div>Thanks for the tips.</div><div><br></div><div>--adam</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Nov 6, 2013 at 1:44 AM, Eneko Lacunza <span dir="ltr"><<a href="mailto:elacunza@binovo.es" target="_blank">elacunza@binovo.es</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<div>Hi Adam,<br>
<br>
We have such an installation and Proxmox works fine, given the
limitations of the underlying hardware (most notable are the
disks).<br>
<br>
For the firewall you can use a dedicated VM or also the native
proxmox (hypervisor kernel) iptables. We use iptables on the
hypervisor, managed by the Firewall Builder front-end, and are
quite happy with it.<br>
<br>
Hope this helps,<br>
Eneko<div><div class="h5"><br>
<br>
On 06/11/13 00:34, Adam Hunt wrote:<br>
</div></div></div>
<blockquote type="cite"><div><div class="h5">
<div dir="ltr">From my reading it would seem that Proxmox was
designed for uses who maintain a cluster of Proxmox instances.
<div><br>
</div>
<div>I'm interested in experimenting with Poroxmox using a
single node for experimentation. Specifically I'm interested
in using it on a single lowish end colo box: Ivy Bridge, Intel
Xeon E3 1245v2, 4 cores, 8 threads running 3.4 GHz (including
VT-x and VT-d), 32 GB of memory, 2 x 3 TB SATA drives (soft
RAID only), gigabit Ethernet, and the possibility of multiple
IPs at a monthly cost.</div>
<div><br>
</div>
<div>My primary question is that I don't need all my VMs or
containers to have private IPs, I assume port forwarding
should work in the majority of cases. My thought was to use
one dedicated public IP for management of the Proxmox instance
and one or more IPs for various services, off-site backup, web
serving, VPN, DNS, VoIP, etc. Does this setup sound tenable?</div>
<div><br>
</div>
<div>One thing I'm a bit foggy on is where the firewall and
forwarding is managed. Are all the rules setup in the Proxmox
host or do I route the non-management IPs to a dedicated
firewall VM (I use pfSense in various places) and distribute
IPs and forward ports them from their (that seems a little
convoluted).</div>
<div><br>
</div>
<div>Thanks for your help. One day I do hope to expand my
Proxmox install to a cluster where I can get full use of its
capabilities.</div>
<div><br>
</div>
<div>--adam</div>
</div>
<br>
<fieldset></fieldset>
<br>
</div></div><pre>_______________________________________________
pve-user mailing list
<a href="mailto:pve-user@pve.proxmox.com" target="_blank">pve-user@pve.proxmox.com</a>
<a href="http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user" target="_blank">http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user</a><span class="HOEnZb"><font color="#888888">
</font></span></pre><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<br>
<pre cols="72">--
Zuzendari Teknikoa / Director Técnico
Binovo IT Human Project, S.L.
Telf. 943575997
943493611
Astigarraga bidea 2, planta 6 dcha., ofi. 3-2; 20180 Oiartzun (Gipuzkoa)
<a href="http://www.binovo.es" target="_blank">www.binovo.es</a></pre>
</font></span></div>
<br>_______________________________________________<br>
pve-user mailing list<br>
<a href="mailto:pve-user@pve.proxmox.com">pve-user@pve.proxmox.com</a><br>
<a href="http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user" target="_blank">http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user</a><br>
<br></blockquote></div><br></div>