[PVE-User] Public ip on PVE

[elmer at leet.la]

Hello,

Now I wonder 2 questions:
1) Is it true I cant use (bridged) openvz for my firewall VE, because it openvz uses same kernel as host ? 
2) Is there any risk of bottleneck for my complete box ? Actually I use a bonded 2x100mb/s for the host connexion. Im scared the internal connection of the firewallVE would cap all my traffic ?

Thanks,
Elmer
  _____  

From: elmer at leet.la
To: pve-user at pve.proxmox.com
Sent: Tue, 04 Nov 2008 18:20:23 +0100
Subject: Re: [PVE-User] Public ip on PVE

                For people who would like to do same thing, I just found 
https://db.usenix.org/publications/login/2005-12/pdfs/prevelakis.pdf
It exactly realizes my idea, but within a Vmware virtual machine.

  _____  
From: elmer at leet.la
To: pve-user at pve.proxmox.com
Sent: Tue, 04 Nov 2008 16:30:41 +0100
Subject: Re: [PVE-User] Public ip on PVE

Has nobody any idea ?

Thank you

  _____  
From: elmer at leet.la
To: Martin Maurer [mailto:martin at proxmox.com], proxmoxve [mailto:pve-user at pve.proxmox.com]
Sent: Tue, 04 Nov 2008 10:09:42 +0100
Subject: Re: [PVE-User] Public ip on PVE

 
 


Thanks, im aware of this Fridu page. (By the
way, if Fridu is on this mailing list, I say thanks for all his sharing and
help to the community).
Im already running a small firewall on the host: firehol. It works well, im
using it since several years on my 3 boxes.
But here, id like to use a dedicated firewall distribution like zeroshell,
untangle or ipcop. More powerfull and complete. 
  _____  
From: Martin Maurer [mailto:martin at proxmox.com]
To: elmer at leet.la, proxmoxve [mailto:pve-user at pve.proxmox.com]
Sent: Tue, 04 Nov 2008 09:21:03 +0100
Subject: RE: [PVE-User] Public ip on PVE

See the firewall scripts from fridu!
http://pve.proxmox.com/wiki/Installation#Networking_and_Firewall

(Proxmox VE will include a firewall in one of the upcoming versions next year, see http://pve.proxmox.com/wiki/Roadmap)

Best Regards,

Martin Maurer

> -----Original Message-----
> From: pve-user-bounces at pve.proxmox.com [mailto:pve-user-
> bounces at pve.proxmox.com] On Behalf Of elmer at leet.la
> Sent: Dienstag, 04. November 2008 09:10
> To: proxmoxve
> Subject: [PVE-User] Public ip on PVE
> 
> Hello,
> 
> Is it possible to set the public ip to a bridged VE?  And the host would
> have just a private ip.
> My purpose is to set a firewall into a VE to protect all the others VE
> and the host itself. So i would set the public ip & a private ip to a
> "firewall VE".
> 
> Internet ---> VE Firewall ---> Others VE & Host.
> 
> I hope i was clear enough. Thanks.
> 
> Elmer
> _______________________________________________
> pve-user mailing list
> pve-user at pve.proxmox.com
> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
_______________________________________________
pve-user mailing list
pve-user at pve.proxmox.com
http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-user
  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.proxmox.com/pipermail/pve-user/attachments/20081105/c1f28580/attachment.htm>