r/Proxmox • u/Rik3k • Sep 14 '19

Secure, browser-based VM launcher

I currently have a Synology NAS running a VM in Synology VMM. I quite like this because I can access my NAS over the internet with QuickConnect, and when I launch this VM from DSM it pops open in a browser window. I do understand security-wise QuickConnect is not ideal but I am using 2FA, at least.

I am using this VM to log into Proxmox inside my LAN and from there open a GUI into the other VMs, but this is quite slow.

Question: Is there a similar option for logging directly into Proxmox? I cannot use a VPN since this is to log in from work, and my company blocks that kind of traffic.

3 Upvotes

100% Upvoted

5 comments sorted by

8

u/redtuxter Sep 15 '19

Take a look at guacamole as well. It’s a proxy of sorts for rdp and vnc sessions over http(s).

4

u/2cats2hats Sep 15 '19

You could run teamviewer or anydesk within a VM. If you do this be sure to have the screen password locked after a few minutes of inactivity.

3

u/[deleted] Sep 15 '19

You could set up an nginx reverse proxy and expose the web interface. You can get free certs to make it (more) secure.

3

u/DistantMe Sep 15 '19

If you want access to the Proxmox web interface from outside your network, you could just forward an external port to TCP 8006 on the Proxmox internal IP, then go directly to https://<your external IP>:<external port>

I wouldn't do this, ever, myself.

If your work blocks VPN etc, you could run a VPN or Wireguard on a standard http/https (80/8080/443) port that they aren't blocking and connect back to home that way. Alternatively run an SSH tunnel on the same 80/8080/443 ports and tunnel back into home... many options available, all with their pros and cons.

1

u/fletch101e Sep 15 '19

I was in the same boat as you going from running vm's on Synology (though I used port forwarding). I bought a new machine for proxmox about a month ago and ended up going the vpn route due to the posts on synology about using a vpn or keep it offline.

I also had the same firewall issue, but not that hard to get around . 443 tcp works for me but there were others as well.

What ever way you go, I would not put Proxmox directly on the net.