OpenVZ Forum - RDF feed
type: channel
items: iptables in vps or on the host node
items: Re: iptables in vps or on the host node

iptables in vps or on the host node
type: item
description: Hi, all. I just started learning how to set up openVZ and it is quite good compared to vserver. I would like to know where iptables should be set up to provide security for vps. Should I set up iptables invidually for each vps or one iptables in hardware node to cover all? Please provide some directions. Thank you for your helps.
creator: midair77
date: 2006-03-16T03:28:20-00:00

Re: iptables in vps or on the host node
type: item
description: You can actually do it both ways. If you want to close some ports for all the VPSs, the best place to do that would be on hardware node itself for obvious reasons (less rules). If you want to set some VPS-specific rules, you can do it either on the host node or from within a VPS. The major difference here in the second case VPS owner can modify those rules. Also note that you can not use all of the iptables modules inside a VPS, just some of them which are virtualized. man vzctl should tell you which ones are possible.
creator: kir
date: 2006-03-16T08:17:53-00:00

Re: iptables in vps or on the host node
type: item
description: Thank kir for your clear and helpful reply.
creator: midair77
date: 2006-03-17T01:09:45-00:00

Re: iptables in vps or on the host node
type: item
description: if you need secure the vps i think will be the best way use iptable vzctl exec vpsid and the iptable command Thank you
creator: jbond007
date: 2006-03-17T02:41:14-00:00