解决了

NOS淬火指南？

  • 2014年10月6日
  • 2回复
  • 1063次观点
P.
徽章 +8
  • PI.
  • 冒险家
  • 3回复
你好，

有没有NOS硬化指南？
两个特定问题：CVM是否有防火墙？我可以安装自己的SSL证书吗？

thx和最好的问候
曼弗雷德
图标

最好的答案Tjagoda.2014年10月6日，17:16

\n
\nAlso - you can install SSL Certificates through Prism, but if your question is specific to using SSL certs for SSH auth that may not be very helpful. I know that 2FA and key-based access is a component of Cluster Shield, but I'm uncertain if that reaches all the way to SSH.","className":"post__content__best_answer"}">
查看原版
    \n
    \nis there a NOS Hardening Guide available?
    \ntwo specific questions: is there a Firewall running on the CVM? can I install my own ssl certificate?
    \n
    \nthx and best regards
    \nManfred","quoteUsername":"pi","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    2回复

    T.
    UserLevel 2.
    徽章 +14
    是的，有一个防火墙 - Iptables的CentOS味道正在CVM上运行。就官方硬化指南来说，我不相信一个人，但如果你通过这里捕获讨论板，你会发现一些智慧的掘金。最常见的推荐可能是将您的CVM从标准VM上隔离为自己的管理网络。

    另外 - 您可以通过棱镜安装SSL证书，但如果您的问题特定于使用SSL证书的SSH Auth，可能不是非常有用的。我知道2FA和基于钥匙的访问是群集屏蔽的组件，但我不确定是否一直到达SSH。
    \n
    \nAlso - you can install SSL Certificates through Prism, but if your question is specific to using SSL certs for SSH auth that may not be very helpful. I know that 2FA and key-based access is a component of Cluster Shield, but I'm uncertain if that reaches all the way to SSH.","quoteUsername":"tjagoda","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
    P.
    徽章 +8
    谢谢你的信息！
    最好的祝福
    曼弗雷德
    \nbest regards
    \nManfred","quoteUsername":"pi","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

    回复


    Baidu