解决了

号硬化指南吗?

  • 2014年10月6日
  • 2回答
  • 1063的浏览量
P
徽章 ＋8
  • π
  • 冒险家
  • 3回复
你好,

是否有NOS加固指南?
两个具体的问题:CVM上运行防火墙吗?我可以安装自己的ssl证书吗?

谢谢，并致以良好的问候
曼弗雷德
图标

最佳答案tjagoda2014年10月6日17:16

\n
\nAlso - you can install SSL Certificates through Prism, but if your question is specific to using SSL certs for SSH auth that may not be very helpful. I know that 2FA and key-based access is a component of Cluster Shield, but I'm uncertain if that reaches all the way to SSH.","className":"post__content__best_answer"}">
查看原始
    \n
    \nis there a NOS Hardening Guide available?
    \ntwo specific questions: is there a Firewall running on the CVM? can I install my own ssl certificate?
    \n
    \nthx and best regards
    \nManfred","quoteUsername":"pi","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    2回答

    T
    Userlevel 2
    徽章 + 14
    是的，有一个防火墙——CentOS版本的IPtables正在你的CVM上运行。至于官方的强化指南，我不相信存在，但如果你仔细观察这里的讨论板，你会发现一些宝贵的智慧。最常见的建议可能是在自己的管理网络上将CVM与标准VM隔离开来。

    此外，您可以通过Prism安装SSL证书，但如果您的问题是特定于使用SSL证书进行SSH认证，这可能不是很有帮助。我知道2FA和基于密钥的访问是Cluster Shield的一个组件，但我不确定它是否一直延伸到SSH。
    \n
    \nAlso - you can install SSL Certificates through Prism, but if your question is specific to using SSL certs for SSH auth that may not be very helpful. I know that 2FA and key-based access is a component of Cluster Shield, but I'm uncertain if that reaches all the way to SSH.","quoteUsername":"tjagoda","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
    P
    徽章 ＋8
    谢谢您的信息!
    致以最亲切的问候
    曼弗雷德
    \nbest regards
    \nManfred","quoteUsername":"pi","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    回复


    Baidu