How to decouple development server from Internet?
- by intoxicated.roamer
I am working in a small set-up where there are 4 developers (might grow to 6 or 8 in cuople of years). I want to set-up an environment in which developers get an internet access but can not share any data from the company on internet. I have thought of the following plan:
Set-up a centralized git server (Debian). The server will have an internet access. A
developer will only have git account on that server, and won't have any other account on
it.
Do not give internet access to developer's individual machine (Windows XP/Windows 7).
Run a virtual machine (any multi-user OS) on the centralized server (the same one on which
git is hosted).
Developer will have an account on this virtual machine. He/she can access internet via
this virtual machine.
Any data-movement between this virtual machine and underlying server, as well as any of
the developer's machine, is prohibited.
All developers require USB port on their local machine, so that they can burn their code into a
microcontroller. This port will be made available only to associated software
that dumps the code in a microcontroller (MPLAB in current case). All other softwares
will be prohibited from accessing the port.
As more developers get added, providing internet support for them will become difficult with this plan as it will slow down the virtual machine running on the server. Can anyone suggest an alternative ? Are there any obvious flaws in the above plan ?
Some key details of the server are as below:
1) OS:Debian
2) RAM: 8GB
3) CPU: Intel Xeon E3-1220v2 4C/4T