Linode Forum
https://forum.linode.com/

Allowing & securing private traffic between 2 nodes
https://forum.linode.com/viewtopic.php?f=19&t=5677
Page 1 of 1

Author:  Mika1974 [ Mon Jun 07, 2010 3:09 am ]
Post subject:  Allowing & securing private traffic between 2 nodes

I started a new topic as I couldn't quite find on the forums what i was looking for. The library did not yield any results either (beyond setting up the private IPs on each machine).

The scenario: We want to let 2 nodes in the same Linode account communicate with each-other securely. We've already setup the eth0:0 on both nodes and verified they where up and running properly.

The setup are two Fedora 13 machines. A web server with private eth0: 192.168.151.100 and a PostgreSQL server with private eth0: 192.168.151.200.

At the moment they cannot ping each-other (times out). We are assuming this is to our machine's firewall policy.

Question 1: With iptables - how do I allow traffic to and from only these machines.

Question 2: In what way can we secure the communications between Web and PostgreSQL servers. This obviously needs to be a resilient method that survives reboots etc.

Any help would be appreciated - once I figured it out I'll add it to the Library for future reference.

Author:  devjonfos [ Mon Jun 07, 2010 10:05 am ]
Post subject: 

Node 1:
...
iptables -A INPUT --src 192.168.151.200 -j ACCEPT
iptables -A INPUT --src 192.168.0.0/16 -j DROP
...


Node 2:
...
iptables -A INPUT --src 192.168.151.100 -j ACCEPT
iptables -A INPUT --src 192.168.0.0/16 -j DROP
...

And see "db3l" posts in this thread about snooping on the private datacenter lan.

Author:  Mika1974 [ Mon Jun 21, 2010 5:47 pm ]
Post subject: 

Thanks. I should have know that but appreciate the response, let's assume someone in the future will find this useful.

Page 1 of 1 All times are UTC-04:00
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/