Safe to run Pangolin VM with two networks (Internet + LAN)?

[mrab95]

Hi, I’m looking for feedback on a Pangolin setup.

I’m planning to run Pangolin inside a VM that has two virtual NICs:

• one connected to the Internet

• one connected to my LAN

The idea is to use Pangolin’s local proxy / tunneling features to expose only specific LAN services to the Internet while keeping the rest of the LAN isolated.

My main questions:

1. Is this dual-network VM setup safe, or are there risks of accidentally bridging/exposing more of the LAN?

2. Is Pangolin designed to handle this kind of gateway/proxy role securely?

3. Any best-practice recommendations (firewalling, network separation, etc.)?

For reference, here is my earlier post describing my environment and Proxmox setup:

https://forums.lawrencesystems.com/t/looking-for-feedback-on-my-proxmox-setup-in-a-datacenter-beginner/25944?u=mrab95

Thanks for any advice!

Looking for feedback on my Proxmox setup in a datacenter (beginner)

Hi everyone I’m pretty new to Proxmox and also to running it in a datacenter environment, so I’d love some feedback on whether my current setup makes sense or if I’m missing anything important. Here’s how it looks right now (I’ve attached a diagram to show the layout more clearly): I have two internet connections: One goes through a UniFi Gateway. One goes directly into the server on a physical port, but without its own CIDR. This is only used for VMs on the server to co…

[LTS_Tom]

Yes, Pangolin should work for this and while it has been designed for this anytime you expose ports you increase risk as a flaw could be found in Pangolin or in what ever you are exposing behind it.