mirror of
https://github.com/elisspace/cybersecurity_bootcamp.git
synced 2026-08-29 15:43:55 +00:00
updating README with config details
This commit is contained in:
19
README.md
19
README.md
@@ -26,26 +26,25 @@ The main purpose of this network is to expose a load-balanced and monitored inst
|
||||
|
||||
Load balancing ensures that the application will be highly available, in addition to restricting access to the network. Using a jump box gives us a centralized location for administering to all other machines on the network.
|
||||
|
||||
Integrating an ELK server allows users to easily monitor the vulnerable VMs for changes to the _____ and system _____.
|
||||
- _TODO: What does Filebeat watch for?_
|
||||
- _TODO: What does Metricbeat record?_
|
||||
Integrating an ELK server allows users to easily monitor the vulnerable VMs for changes to the metrics and system logs. Specifically, Filebeat collects, parses, and helps you visualize logs. Meanwhile, Metricbeat keeps an eye on system resources like CPU usage and file systems.
|
||||
|
||||
The configuration details of each machine may be found below.
|
||||
_Note: Use the [Markdown Table Generator](http://www.tablesgenerator.com/markdown_tables) to add/remove values from the table_.
|
||||
|
||||
| Name | Function | IP Address | Operating System |
|
||||
|----------|----------|------------|------------------|
|
||||
| Jump Box | Gateway | 10.0.0.1 | Linux |
|
||||
| TODO | | | |
|
||||
| TODO | | | |
|
||||
| TODO | | | |
|
||||
| Jump-Box-Provisioner | Gateway | 10.0.0.5 | Linux (Ubuntu 20.04) |
|
||||
| Web-1 | Webserver | 10.0.0.6 | Linux (Ubuntu 20.04) |
|
||||
| Web-2 | Webserver | 10.0.0.8 | Linux (Ubuntu 20.04) |
|
||||
| Web-3 | Webserver | 10.0.0.9 | Linux (Ubuntu 20.04) |
|
||||
| RedTeam2.LoadBalancer | Load Balancer | 13.92.133.179 | Linux (?) |
|
||||
| RedTeam-ELKServer | ELK Server | 10.1.0.4 | Linux (Ubuntu 20.04) |
|
||||
|
||||
### Access Policies
|
||||
|
||||
The machines on the internal network are not exposed to the public Internet.
|
||||
|
||||
Only the _____ machine can accept connections from the Internet. Access to this machine is only allowed from the following IP addresses:
|
||||
- _TODO: Add whitelisted IP addresses_
|
||||
Only the `Jump-Box-Provisioner` and the `RedTeam-ELKServer` machines can accept connections from the Internet. Access to these machines is only allowed from the following IP addresses:
|
||||
- \*\*.\*\*.\*\*\*.102
|
||||
|
||||
Machines within the network can only be accessed by _____.
|
||||
- _TODO: Which machine did you allow to access your ELK VM? What was its IP address?_
|
||||
|
||||
Reference in New Issue
Block a user