Last edited:
✨ Gatto's System Administration Services ✨
- Thread starter Gatto
- Start date
- Status
PebbleHost
High performance, consistent uptime and fast support. Minecraft hosting that just works.
How would you go about properly securing and optimizing a server running Ubuntu or CentOS for KVM virtualization on a /29 subnet with the provider being hetzner? What would your bridges look like and how would you setup the interfaces for proper routing? Would you recommend CLI or GUI for virtualization and why?
Hello, thanks for your interest on this.
I always recommend CentOS due to it being stable and solid and it's relation with RHEL, this is also the one i'm more familiarized with. Starting with a fresh install we'll call an update to get all the updates (including the security updates) and then we'll do a reboot. Now we'll add a new user with sudo ability so we can still manage the host machine after the next steps, we'll setup an ssh key for it too. Then we want to disable the ssh root login from the ssh configuration, the port can be changed too for more security. I don't do optimization unless something is showing a poor performance or is having issues, but in the latest versions CentOS includes a set of performance profiles which includes some that are virtualization enhanced, we can choose one of these. Now with networking, i don't have experience with Hetzner specifically as no one of my clients or myself ever used this company. Every company is different, but hetzner (like most providers, again) has a nice wiki (See: https://wiki.hetzner.de/index.php/IP-Adressen/) with all the required info for this. I won't be going into further detail for this, if you're interested in getting this service we can further discuss it privately, i can assure you i will get it working as needed. I'm not sure about what do you mean with your last question, if you mean the virtualization environment i can do either of them but i usually stick with some environment that includes a gui (like proxmox), just to because it's easier to manage after you have set up everything, cli can still be used when needed. In general, there's still a lot more things that can be done on the fly and things to adjust depending on what the customer needs and wants.
- Status
