@olivierlambert Thank you for replying. Here we get a wider question - is there a built-in firewall in XCP-NG? I don't see any signs of netfilter, iptables, ufw etc. presence on XCP-NG host. So, it may be very helpful if you shed some light on this matter.
I also don't understand how disabling xo-lite may be related to disabling SSH.
@olivierlambert said in Limiting access to xo-lite to a specific IP address or ssubnet:
You can indeed disable XO Lite, it makes sense in the case you want to also disable SSH
SSH is way easier to protect by enforcing private key authentication, while xo-lite may be just a target for brute-forcing. So, yes, what makes sense is that we limit what ports are exposed and who can access them.