1 Topic by Oberon
  • Oberon
  • I am new about town
  • Offline
  • Registered: 2009-10-14
  • Posts: 2

Can security software like firewall that are installed on the main server protect all VPS running on the system or individual firewall needed for all VPS?

2 Reply by Rich/Rich
  • Rich/Rich
  • I am new about town
  • Offline
  • Registered: 2009-10-14
  • Posts: 1

My opinion has always been that as far as firewalls are concerned, there can never be too much of a good thing!

The VPS (software) firewall is important as you can set specific rules for services and ports, such as denying SSH access from any IP other than yours etc. 

The Hardware Firewall can usually set these rules too, and is important as any heavy malicious traffic, for instance, would be handled by the hardware, and wouldn't cause high loads on your server.  However creating sets of custom rules specific to your needs on a hardware firewall is generally harder than the software equivalet and so is usually more expensive.

3 Reply by NuBlue-Paul
  • NuBlue-Paul
  • Hosting Team
  • Offline
  • From: Lancaster UK
  • Registered: 2009-06-02
  • Posts: 28

Hi,

We use Virtuozzo for our VPS platforms and each VPS is provided with the Plesk Control Panel.

The Plesk Control Panel has its own built in firewall, basically Iptables but with a friendly web-based gui, this is software based and located on the VPS.

We also provide a hardware firewall that can be used to set up more static rules, as the hardware firewall is at point of entry to our network, any rules within it that drop traffic will drop the traffic before it reaches your VPS.  Unfortunately we do not provide a web interface for the hardware firewall so you its not necessarily useful to customers who want to change their rules frequently.

The software firewall on your VPS incurs a small overhead as traffic needs to be checked against the rules before allowing through or dropping, but it does have the advantage that you have full control of the firewall (this is of course a disadvantage if you shut yourelf out of your VPS!) and can make changes that will be enacted instantly.

Paul.

NuBlue-Paul's Website