Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Before the virtualization era, it was recommended to have several network card on a physical server :

  • 1 for production dedicated network (only application's stream like http, SQL*NET, ...)
  • 1 for administration network (ssh, monitoring, ...)
  • 1 for backup network (netbackup, ...)

These recommendations had security and ops advantages: network port for administration or backup purpose are not available on production facing network, dedicated bandwidth for backup that doesn't impact production bandwidth, ...

With virtualized servers and network are multiple network card/interface still recommended ?

share|improve this question
    
Which multiple interfaces do you mean? Physical cards on the host or virtual interfaces on the guest? –  Vitaly Osipov Oct 31 '12 at 23:15
    
Virtual interfaces on the guest. –  Franck Nov 1 '12 at 10:38
    
Probably not then –  Vitaly Osipov Nov 14 '12 at 3:22
add comment

1 Answer

It depends on your security goals. Separate interfaces have been used not only for the advantages you stated, but also to keep the dedicated networks, storage and backup networks, and the administration networks logically segregated. Just because an infrastructure is virtualized doesn't mean that the need for network segregation goes away.

If you lump all these networks together into one you are no longer able to enforce specific security rules for each, so if you have a security requirement to keep these networks separate before virtualization then you need to keep them separated after virtualization.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.