overview for sonnybwson

Securing Remote Proxmox for Off-Site Backup by sonnybwson in c/homelab@selfhosted.forum

[-] sonnybwson@alien.top 1 points 11 months ago

Thanks for the insights! I'll consider your advice on a separate secure network and encryption for backups. Your points on limiting access and iLO4 usage make a lot of sense. Appreciate your expertise as I figure this out!

Securing Remote Proxmox for Off-Site Backup by sonnybwson in c/homelab@selfhosted.forum

[-] sonnybwson@alien.top 1 points 11 months ago

Thanks for your insights! I'm considering your suggestion seriously. To clarify, do you recommend not using iLO4? Are there alternative methods you'd recommend for secure access and control in a scenario where iLO4 isn't utilized?"

1

Securing Remote Proxmox for Off-Site Backup (alien.top)

submitted 11 months ago by sonnybwson@alien.top to c/homelab@selfhosted.forum

5 comments fedilink

Hey r/homelab,

I've got a 3-node Proxmox cluster at home and am gearing up to set up a Proxmox box at a remote site. My main concern is the trustworthiness of the network there, and I want to ensure maximum isolation.

This box will primarily serve as an off-site backup solution and I'll be utilizing Tailscale, since I have zero access to the firewall or router of the remote site network and I'm also behind CGNAT on both sites.

Specifically, I want to configure the Proxmox box (and the iLO4 on my HP ProLiant ML310e Gen8) so that nobody on the remote network can access them.

Any tips or best practices on securing both Proxmox and iLO4 in this context? I'm especially interested in insights on network isolation and additional security measures.

Thanks a bunch for your help!