Proxmox Repository List of CDN Hosts

[RAW]

Hello everybody,

I'd like to restrict outgoing access of my PVE host to only necessary hosts for security reasons. Unfortunately it's impossible to put eather enterprise.proxmox.com or download.proxmox.com into my firewall polices, as it resolves only one of the CDN's IP addresses at a time.

Is there any domain or URL with a list of each CDN node that my firewall can fork?

I'm aware of the Proxmox Offline Mirror, but that would only be my last resort.

 

[gurubert]

I'm aware of the Proxmox Offline Mirror, but that would only be my last resort.

IMHO this would be easier in that situation than trying to play catch with changing CDN IPs.

 

[RAW]

IMHO this would be easier in that situation than trying to play catch with changing CDN IPs.

That game is odd anyway.

I'll appreciate something like a downloadable list or a domain with A records of each CDN ip address, maybe the Proxmox Team can provide this.

 

[RAW]

Just a little reminder, still in search for a CDN list

 

[apollo13]

If you don't want to use proxmox offline mirror then I'd suggest using a HTTP-Proxy. This way you can whitelist the URLs. Allowing CDN IPs is (depending on the CDN) not really the most secure solution anyways since IPs are reused by multiple services.