How to secure every vm from host?

[LeJocker]

Hi,i have a proxmox 3.1 with a vm which is linked to an ip failover.
My domain name point to this ip failover.
I would like to secure my vm....
To do this, it would be great to only install iptable / fail2ban on the host and nothing on the vm....
Is it possible? How to do this?... I can't find some tutorial avout that.


thanks

 

[screenie]

Hi,

It's not so clear to me what you are trying;
My setup contains several VLAN's for the VM's, the host has it's ip in the management VLAN;
When you have no routing instance which forwards the traffic between management VLAN and the VLAN's of your VM's you are on the save side;
If you need to isolate the VM's also from each other, simply create a separate VLAN for each VM;
I have a separate firewall cluster which controls the traffic....

Alex