[PVE-User] Web interface security

[Flavio Stanchina]

Gerald Brandt wrote:
> I'm considering placing ProxMox on a server that is facing the internet.  Although all my VM's would be behind a firewall, the Proxmox server itself wouldn't be.
>
> How secure is the Web interface?
> What are the security implications?

I can see why one might want to have a public IP or two on a Proxmox 
server, but why would you put the Proxmox *interface* on a public 
network? I' rate the security implications as "too hot to handle".

Firewall ports 80 and 443 (or 8006 on PVE 2.x) on the public interface; 
if you need to access the GUI from the outside, use ssh port forwarding. 
I just suggested the same thing a few days ago, here's a link from the 
mailing list archive:
http://pve.proxmox.com/pipermail/pve-user/2012-September/004516.html

-- 
Flavio Stanchina
Informatica e Servizi
Trento - Italy