How do you secure the VMware ESXi web interface without a VPN?
Answer
I put an nginx proxy in front of the ESXi web interface: the proxy demands HTTP Basic authentication over SSL/TLS, and the ESXi firewall accepts traffic only from that proxy. Administrators keep worldwide access without a VPN.