Trying to secure the drbd-network of proxmox cluster

Hello everybody,

am trying to secure the drbd. i have used this guide:

security-best-practices-for-linstor-software-defined-storage-clusters

i stucked on the point Securing the LINSTOR Controller’s REST API

i can not get into the drbd_storage on proxmox since i configured the https API. I found the following in the logs:

:~# journalctl -u pvestatd -n 50 --no-pager

API Return-Code: 302. Message: Could not query all size infos for res groups, because:
                                         <html>
                                         <head><title>Document moved</title></head>
                                         <body><h1>Document moved</h1>
                                         This document has moved <a href="https://172.16.222.254:3371/v1/queries/resource-groups/query-all-size-info">here</a>.<p>
                                         </body>
                                         </html>

my storage.cfg file is looking like this:

drbd: drbd_storage
        content rootdir,images
        controller 172.16.222.254 #Virtual_IP
        resourcegroup pve-rg

By the way i did not deactive the http api. In this case the connections will be redirected to https.

my goal is to secure my DRBD-Network api, drbd-replication and the communication between the nodes over ssl

i am glad to hear your advice. :slight_smile:

Best Regards
Youzersef