Skip to main content

A-020 - Hypervisor

Purpose​

Host and manage all virtual infrastructure components within the Scheol lab.

Asset Type​

  • Infrastructure

Description​

  • Physical host running virtualization platform (Proxmox)
  • Provides compute, storage and networking for all internal VMs and containers
  • Central point of control for infrastructure lifecycle

Criticality​

  • Critical

Sensitivity​

  • Highly Sensitive

Exposure Level​

  • Internal only

Trust Zone​

  • Hell

Dependencies​

  • Physical hardware
  • Local storage systems

Relationships​

  • Hosts all internal infrastructure assets
  • Supports firewall, identity services, monitoring and backup systems

Security Position (Architecture Context)​

  • Root of trust for internal infrastructure
  • Compromise leads to full control over hosted systems
  • Critical for isolation between services

Existing Protective Measures​

  • Restricted access (no public exposure)
  • SSH hardening (non-root, custom port, fail2ban)
  • Snapshot capability for recovery

Owner / Responsibility​

  • Operations Role (Ops)

Notes​

  • Not exposed to the internet by design
  • Security relies heavily on administrative access control