I have the engine running on a dedicated server. I would like to separate the VM Portal to another server or maybe have another instance of VM portal on another server. The idea is to be able to put the VM Portal on a different subnet and to put a firewall between it and the engine. Thanks. On Wed, Jul 15, 2020, 17:18 Sandro Bonazzola <sbonazzo@redhat.com> wrote:

Il giorno mer 15 lug 2020 alle ore 12:26 <gal.villaret@gmail.com> ha scritto:

...

Hi Folks,

I'm rather new to oVirt and loving it. running 4.4.1. I would like to be able to run the VM Portal on a stand-alone server for security concerns.

Can anyone point in the right direction for achieving this?

Can you please elaborate? Are you asking for having the admin portal and the VM user portal running on 2 different servers? Or running the engine on a dedicated server instead of on self hosted engine VM?

...

Thanks,

Gal Villaret _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3BE6CNDNLDKZQW...

--

Sandro Bonazzola

MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA <https://www.redhat.com/>

sbonazzo@redhat.com <https://www.redhat.com/>

*Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours. <https://mojo.redhat.com/docs/DOC-1199578>*

Thanks. Using a proxy is my plan. I was asked by my security team to add some more "distance" from users to the server running the engine and the database. Coming to think of it, maybe deploying the DB on a standalone server is a better approach. On Wed, Jul 15, 2020 at 10:08 PM Michal Skrivanek < michal.skrivanek@redhat.com> wrote:

On 15 Jul 2020, at 17:12, Gal Villaret <gal.villaret@gmail.com> wrote:

I have the engine running on a dedicated server.

I would like to separate the VM Portal to another server or maybe have another instance of VM portal on another server.

The idea is to be able to put the VM Portal on a different subnet and to put a firewall between it and the engine.

it’s possible in devel mode, see docker container at https://github.com/oVirt/ovirt-web-ui but we’re not really updating it very often, I wouldn’t recommend it for production

What’s the concern if you limit access to :443 and use a proxy? There’s not much more a random joe can do without a permission to log into webadmin, there’s just a static landing page with few links.

Thanks.

On Wed, Jul 15, 2020, 17:18 Sandro Bonazzola <sbonazzo@redhat.com> wrote:

...

Il giorno mer 15 lug 2020 alle ore 12:26 <gal.villaret@gmail.com> ha scritto:

...

Hi Folks,

I'm rather new to oVirt and loving it. running 4.4.1. I would like to be able to run the VM Portal on a stand-alone server for security concerns.

Can anyone point in the right direction for achieving this?

Can you please elaborate? Are you asking for having the admin portal and the VM user portal running on 2 different servers? Or running the engine on a dedicated server instead of on self hosted engine VM?

...

Thanks,

Gal Villaret _______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/3BE6CNDNLDKZQW...

-- Sandro Bonazzola MANAGER, SOFTWARE ENGINEERING, EMEA R&D RHV

Red Hat EMEA <https://www.redhat.com/> sbonazzo@redhat.com <https://www.redhat.com/>

*Red Hat respects your work life balance. Therefore there is no need to answer this email out of your office hours. <https://mojo.redhat.com/docs/DOC-1199578>*

_______________________________________________ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-leave@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/EDCHL6QLGDWU2G...