Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Mon Jan 30, 2012 7:46 pm 
Offline
Junior Member

Joined: Mon Jan 30, 2012 3:21 am
Posts: 29
Location: Glendale, CA
The ability to have eth1 interface on a private vlan only for the linodes under your own account to use for internal traffic.

This would allow more secure frontend/backend communications or testing without too much exposure (even with firewall rules setup) it would be one additional useful feature. This would also make NFS mounts more secure if needed.

I know that a private ip address can already be requested, but that address is on the same interface as the rest of the datacenter (eth0) and can be seen by any other linode at your datacenter.


Top
   
 Post subject:
PostPosted: Mon Jan 30, 2012 7:59 pm 
Offline
Senior Member

Joined: Sun May 23, 2010 1:57 pm
Posts: 315
Website: http://www.jebblue.net
You might be able to do what you want with an alias if you are using a static ip already:

/etc/network/interfaces

auto eth0:1
iface eth0:1 inet static
address 127.0.0.100
netmask 255.255.255.0
#gateway


Top
   
 Post subject:
PostPosted: Mon Jan 30, 2012 8:31 pm 
Offline
Junior Member

Joined: Mon Jan 30, 2012 3:21 am
Posts: 29
Location: Glendale, CA
jebblue wrote:
You might be able to do what you want with an alias if you are using a static ip already:

That would not work for what I am requesting.. :-(.

- 127.x.x.x is reserved for the local machine only and MUST not traverse outside the machine it is running on.

- I would want to have the two (or more) linodes communicate with each other, but not have other machines that are not on my account be able to see them at all

- I dont want to "pick an ip out the air" on a vlan shared by other users. Can you say "Anarchy!" [or headache troubleshooting an ip conflict or other problem caused by a misconfiguration on your part or on someone else selecting the same network range as you]....


Top
   
 Post subject:
PostPosted: Tue Jan 31, 2012 11:17 am 
Offline
Senior Member
User avatar

Joined: Tue May 26, 2009 3:29 pm
Posts: 1691
Location: Montreal, QC
Firewall rules are good enough; nobody else can see your non-broadcast traffic, and you can prevent broadcast traffic with firewall rules. Adding a VLAN wouldn't make it any more secure. If you need more security, there's OpenVPN or the like.


Top
   
 Post subject:
PostPosted: Tue Jan 31, 2012 1:51 pm 
Offline
Senior Member

Joined: Sun May 23, 2010 1:57 pm
Posts: 315
Website: http://www.jebblue.net
TeddyR42 wrote:
That would not work for what I am requesting.. :-(.

I see, I misunderstood what you were asking for.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group