Intel Modular Server Configuring DMZ / Inside networks

P

Petrus4

Member
Feb 18, 2009
249
0
16
Best Practice: Intel Modular Server Configuring DMZ / Inside networks

I am about to configure the switch on the intel modular flex server and need to set one server on the inside lan and one server on the dmz. Can anyone share experiences or recommendations?


Just to clarify.. the servers are server modules.. with proxmox -ve running on them, one module needs to be on the DMZ and the other needs to be on the INSIDE.
 
Last edited:
Petrus4 said:
I am about to configure the switch on the intel modular flex server and need to set one server on the inside lan and one server on the dmz. Can anyone share experiences or recommendations?


Just to clarify.. the servers are server modules.. with proxmox -ve running on them, one module needs to be on the DMZ and the other needs to be on the INSIDE.
Click to expand...
Hi,
why you don't use both networks on both servers (vmbr0 and vmbr1)? Than you can move the VMs from one server to the other.
If you want to make a cluster IMHO both servers must be reachable over vmbr0. Is it not a way to use vmbr0 in the inside lan for clustering for both servers and the vmbr1 for the dmz (without ip-address on the proxmox node - only for guests)?

Udo
 
udo said:
Hi,
why you don't use both networks on both servers (vmbr0 and vmbr1)? Than you can move the VMs from one server to the other.
If you want to make a cluster IMHO both servers must be reachable over vmbr0. Is it not a way to use vmbr0 in the inside lan for clustering for both servers and the vmbr1 for the dmz (without ip-address on the proxmox node - only for guests)?

Udo
Click to expand...

Yes this would be great, except that I am concerned about security. I think Tom or Dietmar recommended against putting both INSIDE and DMZ VM's on the same ProxMox-VE HOST, so I was planning to have two separate hosts one on the DMZ and one on the INSIDE with no communication between them. I am open to any other suggestions as long as they are secure.
 
Best practices: Intel Modular Flex Server Configuring DMZ / Inside networks

Hello Tom or Dietmar do you have any best practice recommendations on configuration on the Intel modular server switch for inside and dmz networks as described in my initial post? I was considering just going for two separate vlans.. but wanted your input on best practices for this (considering security, performance, clustering, etc)

Thanks!
 
Re: Best practices: Intel Modular Flex Server Configuring DMZ / Inside networks

no, we do not have any special documentation about this.
 
Re: Best practices: Intel Modular Flex Server Configuring DMZ / Inside networks

tom said:
no, we do not have any special documentation about this.
Click to expand...

Ok thanks Tom, I will add some documentation as soon as I have figured it out for myself.
 
Re: Best practices: Intel Modular Flex Server Configuring DMZ / Inside networks

thanks, that would be nice.
 
You must log in or register to reply here.
Top Bottom