PVE Cluster :: Disabling web interface on slaves?

[Giovanni]

Hi guys

I was wondering what would the best approach be to disable the web interface on a PVE Cluster, I only want to have access to the web interface via the master node and avoid HTTP traffic on slaves.

How would I go about disabling it, and would it affect proxmox live migrate or any cluster features?

Thanks

 

[bogomolov]

dirty suggestion:

Block the access to web TCP ports (80/443) on slaves via iptables.

[]'s

 

[online24]

Actually, i did it for my self:

iptables -A INPUT -p tcp -s MY_IP/32 --dport 80 -j ACCEPT
iptables -A INPUT -p tcp -s MY_IP/32 --dport 443 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j DROP
iptables -A INPUT -p tcp --dport 443 -j DROP

Only you, could connect to PVE Web Management, it didnt affect migrates and other stuff.

Copy these lines to /etc/rc.local

 

[dietmar]

Never tried it, but AFAIK you can deinstall apache.