On 2019-12-10 21:52, Rami Al-Dalky wrote:

Hi,

If someone is planning to host a VM anchor, what are the security measures that RIPE Atlas can provide? For example, protecting the VM from being compromised by an attacker.

Any information about this is highly appreciated because the plan is host several anchors.

Thanks, Rami

Hello, There's no single best answer to this question. The operations team behind anchors are keeping the machinery updated with all the latest patches, just like you'd do with any Internet-connected server. We consider it very important when we manage these machines. They also provide very limited services (e.g. DNS and HTTP(S)). On the other hand the very reason for installing an anchor is to make it reachable (be measured) and to reach other hosts (to measure) so forms of firewalling are counterproductive to the purpose. When in doubt, we recommend placing these "just outside your firewall". Regards, Robert