Private Networking and Security
Good evening everyone,
We are planning to deploy a web application through a Linode VPS. This VPS needs to be monitored, (we are planning to use Zabbix). Since the application will be publicly available over the Internet (http/https), we figured it will be a good time to give it a try to the built-in Private Networking of Linode.
We successfully managed to create 2 VPSs in the same Datacenter, and also added a Private IPv4 Address to each of them. After rebooting the server, it seems like they are ready to communicate using this Private IPv4.
My question is:
We noticed this private IP is linked to the eth0 adapter which also has our public IP, with FirewallD, how can I limit only one IP to communicate with the Private IP on this VPS? (CentOS 7.6)
I hope this is clear enough, thank you for taking the time.
Regards,
Alvaro Lamadrid
1 Reply
mjones
Linode Staff
Hi Alvaro! I'd recommend setting up iptables rules to block all incoming connections on your Linode's private IP address, except for the other Linode's private IP address.
For example you could use something similar to, this, where 192.168.xxx.xxx is your other Linode's IP address:
iptables -A INPUT -s 192.168.xxx.xxx -j ACCEPT
iptables -A INPUT -s 192.168.0.0/16 -j DROP