I've set up a cluster of 3 machines, and have added 5 LXC's for a Minecraft server that I plan to initially expose limited number of users online, those in school Minecraft club.
Proxmox has the Firewall at the datacenter level, server level and VM, LXC level.
For Minecraft the servers are set up such that all users would join a proxy server at a given port, this is the one server that needs either a tunnel to or firewall rules.
Currently all the servers are on the same network as the home LAN so the kids can access via consoles.
Am I best to create a separate network for the Minecraft servers and can the firewall be used to route the traffic?
Internally (LAN) I want to be able to administer all the LXC's, but externally the only LXC that should be exposed is the proxy LXC. No users should be able to directly bypass the proxy whatsoever.
Any advice of best practice here appreciated.
Proxmox has the Firewall at the datacenter level, server level and VM, LXC level.
For Minecraft the servers are set up such that all users would join a proxy server at a given port, this is the one server that needs either a tunnel to or firewall rules.
Currently all the servers are on the same network as the home LAN so the kids can access via consoles.
Am I best to create a separate network for the Minecraft servers and can the firewall be used to route the traffic?
Internally (LAN) I want to be able to administer all the LXC's, but externally the only LXC that should be exposed is the proxy LXC. No users should be able to directly bypass the proxy whatsoever.
Any advice of best practice here appreciated.