No replies to this topic

[PassingThrough]

I am going to purchase a server to provide remote file storage, remote desktop via VMWare/vnc, and several linux based mail, web, and proxy services for my private and business use.

Given that the server will be physically accessible to the staff at the datacentre and on their network what are my security considerations?

My specific concern is security of my network services. In terms of remote file hosting, encryption and key management will be done at the client side so the colocated server will never see the plaintext. I am more concerned about what is going on in the hosted virtual machines.

To what extent would full disk encryption be of assistance given that the key needs to be provided remotely (probably at boot via one of the datacentre IPKVMs)? What about two factor or hardware token authentication?

I do not expect a targeted threat from the datacentre however I am hosting some applications / databases of a commercially sensitive nature and wish a certain level of security. What will defeat routine / casual snooping and what if any monitoring can I install to give warning of a more determined probe?