Search results

  1. B

    Micro-segmentation, and NFTABLES

    I added the following My remote access (22,8006) <-- to access the GUI or SHELL. deny all <-- reject any other traffic on all interfaces if i apply this using IPTABLES, the deny rule overwrite the default allow rules and all nodes lose access to each other, while my remote access is able to...
  2. B

    Micro-segmentation, and NFTABLES

    Thanks again for your support I only enabled my remote access (22,8006) and drop ANY, while disabled other rules 1- cat /etc/pve/firewall/cluster.fw [OPTIONS] enable: 1 [ALIASES] PVE1-CEPH-PRIVATE 10.72.4.20 # PVE1-CEPH-PRIVATE PVE1-CEPH-PUBLIC 10.73.4.10 # CEPH-PUBLIC PVE1-CLUSTER...
  3. B

    Micro-segmentation, and NFTABLES

    Thanks a lot shanreich for your swift reply, Sorry for the late reply, i was testing, and I have 3 questions please. For the SDN, I was planning to do it, however I'm not sure if it's applicable in my situation I have 12x Interfaces into 6x bonds, 4 of them are the Proxmox (mgmt, cluster...
  4. B

    Micro-segmentation, and NFTABLES

    Dear member, I have the following HCI setup attached as high level overview, 4x Proxmox cluster nodes 8.3.2, with local SSD disks in CEPH cluster, each node has 12 interfaces 2x 1Gbps interface (Proxmox Management) 2x 1Gbps interface (Proxmox Cluster) 2x 40Gbps interface (CEPH Public) 2x...
  5. B

    PVE HCI Network and Storage Overview

    Hi Pierre-Yves, Thanks a lot for your reply, For the bonding I'm going to have LACP since I'm running active-active setup, regarding the backup I'm considering dedicated hardware, can you please advise which VLAN does this back should operate, Proxmox cluster, CEPH cluster or CEPH public? or...
  6. B

    PVE HCI Network and Storage Overview

    Dear Everyone I'm building HCI using Proxmox as hypervisor, CEPH cluster as storage. My environment should be running around 40-60 VMs for production, my up-link is 100Mbps Proxmox is totally new for me and therefore I need some advise, clarification and recommendation for my setup My...