Securing physical (bare-metal) servers
Let’s get started!
Problem
How to secure and protect bare-metal servers.
Context
The foundation infrastructure is made up of bare-metal or physical servers. Bare-metal servers are also referred to as dedicated servers and provide maximum performance by delivering single tenancy. As shown in the diagram that follows, the security design needs to cover the different layers that make up the server. These layers include the physical hardware and the host operating system forming the bottom of the stack. The next layer is formed of the binaries and libraries that are leveraged by the operating system and hosted applications:
Figure 5.2 – Bare-metal server
The bare-metal server option provides direct root access to server resources and the consumer has the opportunity to customize the environment as per their needs. While there is flexibility with a bare-metal server, it increases the security...