Two Node Cluster + Shorewall

[krnac.a@gmail.com]

Hi,

I have two nodes cluster and it works great...
Shorewall is installed on both nodes and virtual machine 100 is managed by HA.
I want VM100 to be accessed from the internet only on port 8080. (e.g 1.2.3.4:8080)

I cant figure out, how to configure vmbr and shorewall zones/interface/rules...


Thanks a lot...

 

[joru]

Hi,

it's not a direct answer to your question, but proxmox provides it's own firewall. Especially with your HA setup, it could be very useful to be able to manage the firewall for your whole cluster in one place.

First you have to enable the firewall at datacenter level under Datacenter > Firewall > Options and then for the vm itself, <node> > Firewall > Options. After that you can create rules by going to <node> > Firewall

For more help you can consult the manual https://pve.proxmox.com/pve-docs/pve-admin-guide.pdf#chapter.13

Hope this helps!

 

[UdoB]

Wow! An answer for an exactly ten years old question

Nevertheless: welcome to the club

 

[joru]

Lol, misread the date, thought this was a new one xD

 

[pvps1]

besides the 10y thing these are 2 completely different concepts I guess. op didnt show any details but sounds like a firewall infront of the network vs host based firewalling