sonnybwson

joined 1 year ago
sorted by: new top controversial old
Securing Remote Proxmox for Off-Site Backup in c/homelab@selfhosted.forum
[โ€“] sonnybwson@alien.top 1 points 1 year ago

Thanks for the insights! I'll consider your advice on a separate secure network and encryption for backups. Your points on limiting access and iLO4 usage make a lot of sense. Appreciate your expertise as I figure this out!

Securing Remote Proxmox for Off-Site Backup in c/homelab@selfhosted.forum
[โ€“] sonnybwson@alien.top 1 points 1 year ago (2 children)

Thanks for your insights! I'm considering your suggestion seriously. To clarify, do you recommend not using iLO4? Are there alternative methods you'd recommend for secure access and control in a scenario where iLO4 isn't utilized?"

1
Securing Remote Proxmox for Off-Site Backup (alien.top)
 

Hey r/homelab,

I've got a 3-node Proxmox cluster at home and am gearing up to set up a Proxmox box at a remote site. My main concern is the trustworthiness of the network there, and I want to ensure maximum isolation.

This box will primarily serve as an off-site backup solution and I'll be utilizing Tailscale, since I have zero access to the firewall or router of the remote site network and I'm also behind CGNAT on both sites.

Specifically, I want to configure the Proxmox box (and the iLO4 on my HP ProLiant ML310e Gen8) so that nobody on the remote network can access them.

Any tips or best practices on securing both Proxmox and iLO4 in this context? I'm especially interested in insights on network isolation and additional security measures.

Thanks a bunch for your help!