• 0 Posts
  • 32 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle










  • I wouldn’t let every VM have an interface into your management network, regardless of how you implement this. Your management network should be segregated with the ability to route to all the other VLANs with an appropriate firewall setup that only allows “related/established” connections back into it.

    As for your services, having them on separate VLANs is fine, but it seems like you would benefit from having a reverse proxy to forward things to the appropriate VLAN, to reduce your management overhead.

    But in general, having multiple interfaces per VM is fine. There shouldn’t be any performance hit or anything. But remember that if you have a compromised VM, it’ll be on any networks you give it an interface in, so minimizing that is key for security purposes. Ideally it would live in a VLAN that only has Internet access and/or direct access to your reverse proxy.










  • I feel like you latched on to one sentence in my post and didn’t engage with the rest of it at all.

    That sentence, in your defense, was my most poorly articulated, but I feel like you responded devoid of any context.

    Am I to take it, from your response, that you think that a fractal image that uses a copywritten image as a seed to it’s random number generator would be copyright infringement?

    If so, how much do I, as the creator, have to “transform” that base binary string to make it “fair use” in your mind? Are random but flips sufficient?
    If so, how is me doing that different than having the machine do that as a tool? If not, how is that different than me editing the bits using a graphical tool?