Proxmox safe to host on public IP?

[isparks_curtis]

Sorry, I'm still pretty new to Proxmox, so I apologize if this question has already been addressed... Is Proxmox 1.7 something you can put on a public IP for remote management purposes, or is there some additional hardening that needs to be done before considering that?

Thanks,

Curtis

 

[dswartz]

I would definitely want to lock down the web management and ssh to trusted addresses if possible.

 

[isparks_curtis]

If I used iptables to block all access to the proxmox IP except for trusted addresses, would it have any effect on accessing the OpenVZ containers (which are on their own separate ips)? I know with Xen I was able to do that, but I'm still new to OpenVZ and wasn't sure whether iptables works the same here.

Curtis

 

[dswartz]

Assuming your hosting provider gives you a subnet, then yes, you could protect the whole subnet if you wanted.