2 ms·
But it's a freestanding computer that means that I don't need to go to the data center at two in the morning to bring up a box that's kernel panicked. Yeah, be
by rosser 14y ago
But it's a freestanding computer that means that I don't need to go to the data center at two in the morning to bring up a box that's kernel panicked.
Yeah, be careful with it. Firewall it silly. But recognize that it's a tool that can be very useful.
- EvanAnderson 14y agoThey're definitely useful tools-- don't get me wrong about that. The fear is that they're controlled, essentially, by an in-band signaling mechanism. Being grafted onto the same NICs on the server computer that you might potentially expose to the Internet makes firewalling them a more difficult proposition. I get a lot of piece of mind from having management interfaces on an an out-of-band control network whenever possible.
- rosser 14y agoIf you use your BMC's "pass-through" capability to push its traffic through your regular NICs, you're Doing It Wrong. In fact, if you're not running a separate physical network (not merely separate VLANs) that is, to the extent possible, air-gapped from the rest of the world for your IPMI traffic, you're probably still Doing It Wrong.