Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am involved in creating a system where the web application and the database won't be hosted on the same LAN or WAN, i.e. data will be transferred across public network. The web server and database server will be located in the same country.

As the data communication needs to be secure I am researching a couple of options:

Option 1: IPsec tunnel between web server and database server

Option 2: Encrypting data using SSL between web server and database server

To try to give some background, the purpose of the web application is to present data (mostly graph co-ordinates, text labels, etc) from the database so for each page request there will be 1-2 database requests returning 10-100 records.


How much will encryption degrade the application performance?
How much will having disparate locations for web and database servers affect performance?
Would there be a performance difference between the two options?

Am still researching, but any help would be appreciated, I know the question are a bit general so general answer is okay or experience with this type of disparate server model would be great too!

I've read this post:

share|improve this question
up vote 0 down vote accepted

The answer depends entirely on the strength of the encryption you choose, and the speed of the CPUs on the two servers.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.