Hi, I'm planning a VCL deployment for a subset of users who will be working on sensitive data. I'm thinking each research group should have a separate VCL portal they'll log into after establishing a VPN tunnel. The VPN server will assign each user an IP address based on group membership. All VMs (KVM), CIFS shares, NFS exports associated with that group will have addresses within that subnet. This should help segregate the silos of data.
I'm wondering if anyone out there has set up something similar, any advice/tips would be appreciated. Also, I have a more specific question regarding some documentation I found in the VCL wiki (in the Security Features section): - The VCL environments are not generally shared. One user to one machine. Does that statement apply to bare metal provisioned systems only? Is VCL capable of provisioning multiple VMs on a single host? thanks, > Nate
