3 ms·
Internet exposed bastion hosts to production, that have no IP whitelisting are not the best idea, unfortunately not uncommon nowadays.
by kerng 7y ago
Internet exposed bastion hosts to production, that have no IP whitelisting are not the best idea, unfortunately not uncommon nowadays.
- closeparen 7y agoThat's what a VPN server is.
- kerng 7y agoOrganizations that have high value assets would deploy multiple layers of these, not just one, basically depending on value of assets.
- closeparen 7y agoYou're gonna get some pretty fun pathological networking behaviors tunneling VPNs on VPNs.
- xxpor 7y agoYou need always need multiple layers of security. Using the network itself as one was never necessary, although it has been convenient. Nowadays U2F based 2fa authentication and need to know based authorization are usually superior.
- kerng 7y agoApplying both is better, then just depending on one of them.