I'm in the process of trying to setup a couple Win2008 Server Virtual Machines on Windows Azure (using the VM Preview feature) and I'm not sure how to get my desired "architecture" setup properly. Here's what I'm trying to achieve -
I want one server that will act only as my database server running MongoDB (I know they say Linux is better, but I'm restricted to Windows for various reasons at this point in time).
I want a second server that will act as my webserver. This web application will be ran off node.js.
The database server should only accept connections from the web server and only after a handshake has been made, and was successful.
I can solve the handshake problem by having a second node.js server running on the database server that basically acts as a Rest API for my database while verifying handshakes and what not. The thing I'm having a problem figuring out is how to make the database server accept connections from only my web server?
If we assume I do build the second node.js app for the DB server, is this network configuration even required considering I could build the node app to only accept connections from a certain IP address? Or would it still make sense to maintain this rule somewhere else?
I know absolutely nothing about networking so this is all a little over my head right now. I would appreciate any help, guidance, links, etc anyone has to share :)