3 ms·
> we're behind a firewall This is the dumbest thing I've ever seen... unless your firewall is between your host versus every other host and there's no multi-t
by WrtCdEvrydy 7y ago
> we're behind a firewall
This is the dumbest thing I've ever seen... unless your firewall is between your host versus every other host and there's no multi-tenancy, this will suck.
- allset_ 7y agoIn well maintained networks the management interface (IDRAC, etc.) for each server is placed on a separate VLAN which the servers cannot access. This isn't to say that cheap providers actually do this, or that the VLAN can't be accessed by a compromised technician's workstation/laptop.
- fulafel 7y agoSo it's a fail-open design, given the rarity of well maintained networks, and the lability and inobservability of said state. Never trust the network.
- jeltz 7y agoYes, this kind of firewall is always supposed to be between the management hosts and everything else. Only the sysadmins at the data center a very limited set of applications is supposed to be able to access it. The very real risk is misconfiguration.