cPanel behind hardware firewall (if you've done it, please help?)

[sykosoft]

I know it's been asked before, but I've found no definitive answers. cPanel support informed me that they know of users who have successfully placed their cPanel server(s) behind a hardware firewalll, and we are looking to do the same.

We would utilized one-to-one ip mappings.

Has anyone successfully setup a cPanel server in this configuration before? If so, how did you accomplish it, and can you make recommendations?

Thanks,
Michael

 

[eperdeme]

Why would you need to do one-to-one mapping ? Get a firewall that supports drop in mode or just do the simple thing and have route an IP block behind it?

We create a p2p from the core router -> hardware firewall then then setup the public cpanel subnet to route to the p2p IP on the firewall.

We have roughly 10k customers behind this solution on a single HA firewall.

 

[cPanelDavidG]

Why would you need to do one-to-one mapping ? Get a firewall that supports drop in mode or just do the simple thing and have route an IP block behind it?

We create a p2p from the core router -> hardware firewall then then setup the public cpanel subnet to route to the p2p IP on the firewall.

We have roughly 10k customers behind this solution on a single HA firewall.

For licensing reasons: just make sure no 2 cPanel/WHM servers share a single publicly visible IP address; additionally, ensure your cPanel/WHM server always uses the same publicly visible IP address.

 

[eperdeme]

Er thats why you have a routed subnet......?