{'fraction_non_alphanumeric': 0.02093114241001565, 'fraction_numerical': 0.003129890453834116, 'mean_word_length': 4.927536231884058, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 2, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Performance analysis of Proxmox VE firewall for network security in cloud computing server implementation

Virtualization server uses the hypervisor technology in its implementation. Hypervisor is one of the virtualization techniques. Where this technique runs several operating systems together in one host. Cloud computing is a combination of the use of internet-based computer technology. The Open source Proxmox VE (Virtual Environment) is a virtual machine operating system. Where virtual machines are built from the Debian Linux operating system, with the modified RHEL kernel. A firewall is a system designed to prevent attacks on the network. Firewalls can be software or hardware that filters network traffic. Proxmox VE Firewall provides a way to protect network infrastructure. In Proxmox VE firewall allows setting rules for all hosts in a cluster or for virtual machines. In this study, the performance of the firewall from the server virtualization using ProxmoxVE will be examined. This study is intended to determine the performance of the firewall default from Proxmox VE. Firewall testing is done by creating filtering rules in the Proxmox VE cloud server. The results of this study will provide an analysis of the performance of the Proxmox VE firewall that runs on cloud servers. The analysis presents that iptables firewall rules can be applied to cloud servers.


Introduction
Cloud computing has given a new standard in the process of computing where resources are easily virtualized and provides services that can be accessed in real time easily anywhere via a computer network [1]. So that makes cloud computing can have a big impact on progress and innovation in the IT industry [2]. In addition, the resources needed can be in accordance with user requests. Cloud computing is also a new computing paradigm where the Internet is used to connect to network service providers [3]. Cloud computing provides three main services: Software as a Service (SaaS), Platform as a Service (PaaS) and Infrastructure as a Service (IaaS). Furthermore, cloud providers implement various types of cloud models, such as public cloud, private cloud and hybrid cloud. Figure 1 based on the NIST standard illustrates various services and models in cloud computing.
In cloud computing technology the end user does not need to know the physical location of services and data. Cloud computing deals with computing, storage, software, and data access. Cloud computing removes computing and data from end users and organizations [4]. The main benefits offered by cloud computing to tenants are cost reduction and increased scalability. Virtualization applications are widely used in cloud computing. Through Xen and KVM, Lucas Nussbaum [5] built a High Performance Computing (HPC) cluster. At in the data center of BMW Group, virtualization helps reduce electricity consumption by up to 70%. One of the virtualization technologies used in this study is hypervisor technology to provide efficiency in the use of resources by cloud computing.
While cloud computing provides many potential benefits for its users, it also introduces new security threats. With the popularity of Cloud Computing, Cloud security is becoming a vital problem in the Cloud computing domain. The main reason behind this potential security problem is that data and information are now taken from the company. Implementing special security controls for cloud storage is now very important. Typically, any threat that has been faced in a physical data center will be present in a cloud-based data center, but with the added complexity of the long-distance link between the two, plus the lack of ownership and direct control.
The need for cloud security can be overcome by deploying a new layer of protection through virtual security devices, which can facilitate the user's environment to utilize application visibility through user awareness to manage traffic and bandwidth intelligently. And Firewalls play an important role in network security, especially for secure cloud computing servers. Cloud-based virtual firewalls can meet a number of security requirements in the Cloud, including: Secure Data Center, Secure Remote Access, Identity, Management.
The overall cloud-based firewall implementation environment is different from the classic in-house version. Compared to conventional firewalls, cloud-based firewalls can offer several additional features such as scalability, availability, and extensibility [6][7][8]. However, firewall policies are confidential and can be used to find security holes by attackers, so companies don't want to disclose their firewall policies to the cloud because they don't fully trust the cloud. In short, the challenge here is to apply a firewall to the cloud without affecting the performance of the cloud server.
In this study we implemented a cloud-based virtual firewall using proxmoxVE. In particular, the result of new threats that develop against cloud storage so that it requires a firewall system placed on the cloud. However, the addition of these makes the performance of the cloud tends to be slow. So it is necessary to conduct a performance analysis of cloud computing servers that consider the need to implement a virtual firewall using proxmoxVE.

Methods
In this paper we use Top Down Approach using Network Development Life Cycle (NDLC), figure 2, for analysis and design methods. The design of Cloud Server based firewall aims to improve the security side of the network and data security on the cloud server. The Network Development Life Cycle (NDLC) stage consists of five stages, which include: a) Analysis, analyzing the need to conduct research, existing problems and network topology needs; b) Design, design of cloud server based firewall network topology using proxmoxVE as in figure 3; c) Prototype simulation, we simulated to ensure the concept is working well before deployment stage; d) Implementation; deploy the design to the real server device and also we do next step e) Monitoring, for testing and analysis of the performance of cloud-based firewalls. The last step e) Management, do maintenance systems that have been built to run according to the design concept and can be maintained related to the element of reliability and reliability of the system. Cloud computing using a virtual firewall on ProxmoxVE can provide increased security against potential threats to data and networks on cloud servers. At this stage we will explain the processes and methods to protect the cloud with a virtual firewall on proxmoxVE. In this paper, we design includes conceptual design and architectural design. Conceptual design includes some basic ideas about how to overcome the challenges / threats of attacks on the side of a computer network and the existence of system failures and communication failures. While the architecture design includes architectural aspects in integrating the network into the existing Cloud Server service architecture. With this design, it is expected to ward off the threat of attack and can provide solutions and solutions to the problems of network security. Common network security challenges are: Eavesdropping and Denial of Service Attacks.
Eavesdropping is an attack by intercepting and reading messages by unwanted recipients [9]. Here, we present a more complex solution to counteract and support the sending of data against the threat of wiretapping with protocols that use encryption algorithms for valid and solid security. Denial of Service Attacks, Because the system by default can only accept new messages as a whole, except for a single start. To use up system resources, attackers who carry out DOS attacks, can take advantage of the first message feature. He continued to send the first message that was intercepted to the server. The message is attached with the essence of the combination of the original IP address, the key, and the message itself. It is not possible for an attacker to change the message to look like a new request message, without violating integrity [10].
The next stage is the design of the cloud architecture system that will be made, the design of the architectur design is shown in Figure 3. The architecture design will be created using proxmoxVE, the firewall feature in Proxmox is a stateful firewall. A stateful firewall is not just a data packet filter, but it also keeps a constant track of the state of active network connections, such as TCP or UDP protocols. It is also known as dynamic packet filtering, which matches firewall rules with the nature of active connections, providing better protection than simply filtering packets. We set up a firewall for an entire cluster level, specific node levels, and also for each VM. For the firewall configuration rules, we setting the firewall rules to secure the cloud server. Through rules, we can define the flow of traffic and the type of traffic that will be allowed or dropped. The firewall configuration rules are shown in table 1 as well. Table 1. Rule firewall data center.

Results and discussion
Testing on a cloud server system, carried out to get the results of research. Testing the cloud server system by applying firewall rules that have been made. The implementation of Proxmox cloud server architecture design is shown in figure 4.  The implementation of the DataCenter firewall rules on the Proxmox cloud server is shown in the figure 5. Figure 5. Implementation rule firewall datacenter.
In figure 5, the firewall rules shown in the datacenter are shown. Firewall rules line 1 to 4, allow server 1 to server 4 to enter and access the datacenter using the SSH and FTP protocols. Then the firewall rules lines 5 through 6, do not allow computers with IP addresses outside the cloud server network to access the SSH, FTP and ICMP protocols.
The results and performance analysis of the ProxmoxVE firewall are based on testing the firewall rules in table 1. The results and analysis are shown in table 2. Application of firewall rules on the ProxmoxVE cloud server has no effect on the performance of memory and CPU usage on virtual computers. The performance of memory and CPU usage on the ProxmoxVE cloud server is shown in the figure 6.