Any provider with fiber and multiple IP's?

Forums › New Zealand Broadband › Any provider with fiber and multiple IP's?

1 | 2 | 3

jasnz

41 posts

Geek
+1 received by user: 3

#1510654 10-Mar-2016 15:42

timmmay:

Curious why you need multiple IPs, care to share? If you want to hide the IP address(s) just put CloudFlare in front of it and don't leak your source IP. It's a WAF, but works a lot like a reverse proxy. Maybe you can get away without multiple IPs.

So I am not a networking guy. Maybe naively, we have it set up so the box is running and reverse proxies various website-lets of our website. Then we have an ip for the idrac, which can control the box, check it's status. With vflash, we should even be able to load and install new OS's onto the box all remotely. (In fact this is something I / we want to experiment with...) So the idrac is really a separate ip to keep things not too confusing. (I gather for Dirac 7 you can have a pass through? so the same box can share the same ip between the main box and the idrac...? I am not sure about this...)

Then for setting up things like mail etc it is nice to be able to use some of the installers out of the box. Of course you can get around a lot of things with port mapping etc... and then the final reason is we have multiple boxes.

It would be nice to be able to ssh experimentalbox1.myhomeufb.co.nz and ssh experimentalbox2.myhomeufb.co.nz, and not have to put in a port mapping there... etc.

jnimmo

1098 posts

Uber Geek
+1 received by user: 255

#1510838 10-Mar-2016 19:20

You just need a router with VPN capabilities, VPN into the router to get to your management network which would have access to your iDRAC etc.

Don't want the management VPN to be terminated on that computer as then you have no out of band management.

As you say, having at least a couple of IP addresses to play with does make things easier.

jnimmo

1098 posts

Uber Geek
+1 received by user: 255

#1510850 10-Mar-2016 19:23

I would say Ubiquiti EdgeRouter but that might be more complex than you like

A Sophos or WatchGuard UTM box would make light work of setting it all up, added benefit of being able to run a web application firewall on the box directly which could give you access through to the iDRAC interfaces a bit more securely if you really didn't want to VPN

jasnz

41 posts

Geek
+1 received by user: 3

#1510960 10-Mar-2016 22:15

jnimmo:

I would say Ubiquiti EdgeRouter but that might be more complex than you like

A Sophos or WatchGuard UTM box would make light work of setting it all up, added benefit of being able to run a web application firewall on the box directly which could give you access through to the iDRAC interfaces a bit more securely if you really didn't want to VPN

Thanks for the recommendations! That edge router looks very reasonable and interesting. I had thought vayatta was dead but it looks like VyOS is actually under reasonable development.

Thanks, Jas

1 | 2 | 3