Ask Your Question
0

Is it safe to expose openstack horizon on the internet ?

asked 2016-10-11 02:20:45 -0500

bahaika gravatar image

If it isn't safe, why ? If it is safe, is there anything to do to secure the setup (like a fail2ban) ?

edit retag flag offensive close merge delete
add a comment

1 answer

Sort by ยป oldest newest most voted
1

answered 2016-10-11 13:51:36 -0500

Alexander Birkner gravatar image

I would recommend you to hide your complete OpenStack management network in a separate VLAN. And then setup a HaProxy as firewall and just forward the needed ports (with a ip whitelist if possible). Or just use a VPN server to access these services.

Horizon does not have protections against brute-force attacks or something like that. The same counts also for the Keystone API.

edit flag offensive delete link more

Comments

Agree. I wouldn't recommend leaving Horizon open to the Internet. Limiting ports & using an IP whitelist is a good idea as a min precaution. VPN is best. There are various free VPN solutions out there. SoftEther is a nice little VPN with lots of functionality. Untangle is a good free FW w/ VPN

Rick Kundiger gravatar imageRick Kundiger ( 2016-10-11 16:41:50 -0500 )edit
add a comment

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2016-10-11 02:20:45 -0500

Seen: 252 times

Last updated: Oct 11 '16

Related questions

Solaris 11.2 Openstack - CSRF Verification failed

Can't get keystone token: "HTTP Unable to establish connection"

Unable to login to horizon

Horizon requirements

unable to launch console from horizon

Issue with ip assignment in VM

Rebuilding MariaDB database

Horizon:unable to retrieve quota information

Dashboard EMAIL settings

Configure to open horizon on https