Firewall and migration questions

[jordank]

Hey all,

1) I am testing the newest proxmox 2 and so far it has been great but there are a few things I need some help on. I have installed the ufw (uncomplicated firewall) to keep my servers secure, but I don't know all the ports that I need to have open. What ports does proxmox 2 use?

2) I would also like to put ssh on a non standard port, it is easy to change in the sshd_config file but how do I get live migration and some other parts of proxmox to work with it?

3) I have a cluster of four proxmox 1.9 machines and a couple vm's on that. I want to do a full reinstall and put the new version on that cluster but I am not sure of the best way to migrate the vm's to the cluster after it has been re installed. How would you guys recommend migrating my old vm's to a new setup?

Thanks

 

[e100]

3) I have a cluster of four proxmox 1.9 machines and a couple vm's on that. I want to do a full reinstall and put the new version on that cluster but I am not sure of the best way to migrate the vm's to the cluster after it has been re installed. How would you guys recommend migrating my old vm's to a new setup?

We are planning to "backup" the VMs on 1.9 and restore it on 2.0.

To get things done faster we will likely do something like this:
1. create new VM in 2.0 with all the same settings, but do not start it.
2. Turn off VM on 1.9
3. Use rsync/dd/netcat/whatever to copy VM disk data from 1.9 into 2.0 over the network.
4. Start VM in 2.0

 

[dietmar]

1) I am testing the newest proxmox 2 and so far it has been great but there are a few things I need some help on. I have installed the ufw (uncomplicated firewall) to keep my servers secure, but I don't know all the ports that I need to have open. What ports does proxmox 2 use?

http://pve.proxmox.com/wiki/Ports#Port_list

2) I would also like to put ssh on a non standard port, it is easy to change in the sshd_config file but how do I get live migration and some other parts of proxmox to work with it?

Also change the ssh_config. But I do not recommend to touch those settings. Instead block anything unneeded with the firewall.