vlan with private ip in proxmox cluster

[rafafell]

Hello, I'm trying to improve the management of our network and would like suggestions, tips...! We have an active proxmox cluster where the proxmox nodes have public ip; the virtual machines hosted in the cluster use public ip of the same vlan of the cluster

I would like to adjust this and have two possibilities of networks with private IP

(1) vms with internet access, but only accessible within the cluster
(2) vms accessible outside the cluster with public IP intermediation

any suggestion on this? is it a good referral? I see that pfsense has been used for this, is it a good one?

 

[Pierre-Yves]

Hello
If possible, a dedicated network for the IP host is preferred. You can easily achieve this with a dedicated VLAN for instance.
For the VMs, the less they are exposed to Internet, the better it is. Firewall and reverse proxy are your friend.
Remember that Proxmox contains a cluster firewall that can be very useful and permit not to have to build firewall on each VMs.
Proxmox power !

 

[rafafell]

Hello
If possible, a dedicated network for the IP host is preferred. You can easily achieve this with a dedicated VLAN for instance.
For the VMs, the less they are exposed to Internet, the better it is. Firewall and reverse proxy are your friend.
Remember that Proxmox contains a cluster firewall that can be very useful and permit not to have to build firewall on each VMs.
Proxmox power !

We use some vms as VDI and they are accessed by remote access using x2go, Chrome remote desktop... by people from different and distant places. Would you have any network adjustment tips for this type of access, for example?

 

[Pierre-Yves]

If possible, use VPN ...
It's not very complicated to setup.
An easy way is to install a FW dedicated distro (PFSense, OPNSense, IPfire, etc ...) that runs VPN.
Setup the LAN with your VLAN dedicated for this VMs
Setup the WAN with the public IP
We use OpenVPN because you can tune the network setup for each client (access to only one IP for instance).
Regards