Hi Netlynker,
Yes, you can. You can have your physical network hardware put stricter ingress/egress rules as well, or you can route to management server and CPVM/SSVM services via a loadbalancer. A lot of people do have their VRs exposed to the public Internet, for example I see: https://www.shodan.io/search?query=cloudstack - Rohit <https://cloudstack.apache.org> ________________________________ From: Netlynker <netlyn...@gmail.com> Sent: Wednesday, September 26, 2018 6:59:10 AM To: users@cloudstack.apache.org Subject: Is that safe to put public IP directly on Virtual Router/ System VMs? Hi, I looked at the deployment architecture from document and it said to have public IP addresses on Virtaul Router/System VMs. Is that recommended setup? How safe will it be to expose Virtaul Router/ System VMs directly to internet? Any recommendation is welcomed. Thanks in advance, Netlynker rohit.ya...@shapeblue.comĀ www.shapeblue.com Amadeus House, Floral Street, London WC2E 9DPUK @shapeblue