Tuesday, May 19, 2015

firewall - Multiple blades in one chassis, some in DMZ, some in internal network



This question is similar to:
Blade Enclosure, Multiple Blade Servers, Whats the closest approximation to a DMZ?



In my case, I don't have virtualization so I cannot use vLANs as suggested in answers to the question above.




So I have several blades in one single chassis. Some of the blades shall be part of the DMZ and some shall be in the internal network (behind the DMZ).



Is there a security issue as all blades are interconnected via the chassis? Shall I run a firewall on each blade to limit access to the internal chassis network?



I will use HP blades running Linux.


Answer



Virtualization isn't a prerequisite for using VLANs, you just need switch support for VLANs which your HP blade system will almost certainly have.



In most cases you can configure the internal switch which each blades network interfaces connect to on a port by port basis and VLAN at that point giving you the separation you're after.



No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...