[pve-devel] usage scenario for security groups

[Alexandre DERUMIER]

some examples:

1) web|ftp access from internet

webserver security group
   in http 
   in https
   in ftp



2) inter-vms-cluster rules

cluster1 security group
   in|out mysql -src +myipsetofserversip
   in|out http -src +myipsetofserversip


3)

remoteaccess security group
   in ssh -src +myipsetofauthorizedip
   in rdp -src 192.168.0.1


then assign the groups to the vms,

if you want to add a rule for all vms which use a group, simply edit group.




----- Mail original ----- 

De: "Dietmar Maurer" <dietmar at proxmox.com> 
À: "Alexandre DERUMIER (aderumier at odiso.com)" <aderumier at odiso.com> 
Cc: pve-devel at pve.proxmox.com 
Envoyé: Mercredi 28 Mai 2014 17:38:45 
Objet: usage scenario for security groups 



For the firewall documentation, I would like to have some useful 
usage scenarios for the security group feature. 

Do you have some examples where it makes sense?