The tag has no wiki summary.

learn more… | top users | synonyms

-2
votes
1answer
33 views

Why Use a NAT Instance? [closed]

Consider the following VPC: Public subnet with app servers and a separate NAT instance. Private subnet with database server. What benefits do we gain by using a stand alone NAT? EDIT: Why use ...
0
votes
1answer
63 views

TCP Load balancing

I need to implement an architecture that can serve 3 million GPS Devices sending Location Updates/Alerts (every 10 secs) to our system for processing. Features: 1) TCP communication. 1) Long lived ...
-1
votes
1answer
51 views

What are common server architectures to build a reliable website [closed]

Sorry, if my question looks too general, but I am looking for an answers to specific problems that I listed below and would appriciate any help. My website is growing in popularity and I would like ...
1
vote
0answers
96 views

how to design network for virtual machines with just one nic

for the past week or so i've been recovering from the shock that i have literally no idea how my isp's network works, by getting a new box and trying to do a sensible design from scratch. our design ...
2
votes
2answers
324 views

When should another AD domain be created purely to reduce replication traffic

I'm going over some hypothetical AD design scenarios for learning purposes. Lets say I have one domain and two physical locations, sites and DCs. The sites are connected via a limited bandwidth WAN ...
14
votes
2answers
423 views

Campus Network Design - Firewalls

I am designing a campus network, and the design looks like this: LINX is The London Internet Exchange and JANET is Joint Academic Network. My goal is an almost-fully redundant with high ...
2
votes
1answer
117 views

“Full acces”s vs “only web access” to a network [closed]

I'm having trouble with some of the wording used by my lecturer on a exercise he gave us. The goal of the exercise is to design a network for three "labs" in our University: A general purpose lab ...
0
votes
0answers
159 views

Homogeneous cluster versus heterogeneous cluster

By homogeneous cluster I mean a cluster of nodes that all have the same services running. I am trying to set up a cluster of nodes that offer a set of services. The cluster can respond to HTTPS ...
0
votes
2answers
198 views

Calculating required uplink capacity of network switch [duplicate]

Is there any common method (usable in practice) for estimating the uplink capacity of switch based on known number of users connected to this switch and the maximum internet speed they are allowed. ...
0
votes
1answer
201 views

Why use a converged network design in Hyper-V?

I am reorienting myself to Hyper-V in its Windows Server 2012 R2 incarnation and have spent a fair bit of time reading Microsoft's Designing Your Cloud Infrastructure documentation. I am in the SME ...
1
vote
1answer
285 views

how can I present a network diagram on the building that has 3 floors

How can I present a network diagram on the building that has 3 floors? The requirements are to separate the users in one LAN according to their department, what confuses me is on the second and on the ...
2
votes
3answers
357 views

DHCP Relay vs Multi-Homed DHCP Server

I'm sketching out a new network topology and I'm unsure of how to solve the issue of DHCP between two VLANs. 10.50.2.0/23 will hold the majority of our users, corporate wifi, printers etc. ...
1
vote
2answers
85 views

Setting up a network with a UTM and a second firewall

Currently I have a m0n0wall working in my rack doing a good job. Now I want to integrate a Sophos UTM into my network. Is there any way to do this without doubling the firewalls? I know I could throw ...
0
votes
1answer
331 views

Where do local ISPs' core networks connect to? [closed]

Where do local ISPs' core networks connect to? Do they connect to the Internet Backbone owned by AT&T and Sprint (among others) or do they connect to an IXP (Internet eXchange Point)?
1
vote
1answer
400 views

LAN Redundancy - NIC, Cables + Switch?

I'm trying to move to a HA solution and would like to understand what hardware is required to have redundancy in the NICs, switch and cables. The diagrams below show how I envisage a non-redundant ...
0
votes
2answers
74 views

Is it possible to have subnets for hosts connected to a switch? [closed]

re-EDIT I can not provide my attempts and what wen't wrong, because I am only doing the design and not actually implementing right now. Although the goal of this structure is a school network. I ...
0
votes
1answer
330 views

Routing Strategy for Multiple VPCs on AWS

I am planning to setup multiple Virtual Private Clouds (VPC) on AWS. These VPCs will be located in different geos. Each VPC will have public as well as private instances. I need to incorporate an ...
13
votes
1answer
508 views

“Hostile” network in the company - please comment on a security setup

I have a little specific problem here that I want (need) to solve in a satisfactory way. My company has multiple (IPv4) networks that are controlled by our router sitting in the middle. Typical ...
1
vote
2answers
44 views

How to exclude requests from unwanted sources

Scenario: Client buys our analytics services and includes our analytics SDK in his mobile app. Users who download the app will start sending us lots of data. When the client stops paying for our ...
1
vote
1answer
330 views

DNS architecture sanity check

I'm designing DNS service for a network and had a few architecture questions. The O'Reilly/ Cricket Liu DNS book and the NIST DNS security guide don't address these questions except in a very general ...
5
votes
1answer
646 views

Designing segmented LAN with fairly shared hi-speed internet access on a tight budget

With another member of the owners' association, I've been tasked with designing and setting up shared, hi-speed, internet access, for our apartment building. We have very little budget and hope to be ...
0
votes
2answers
482 views

Network design vm virtualization in small office [closed]

I just recently bought a 16gb ram, Intel i7 quad core Mac mini to be used as the central point of entry to my network and am looking for advice on how to design a network suitable for a small office. ...
-1
votes
1answer
75 views

Simulate two domains on one machine to support work/home isolation [closed]

Problem statement: How can I support isolation of identities on a signle in-home network that supports both personal and business resources? I know the Windows NT servers have plenty of methods of ...
0
votes
1answer
939 views

Where should I setup a staging environment in Amazon VPC? And testing?

I setup the production environment for my service in an Amazon VPC in Oregon: 2 availability zones 1 public subnet (including bastion, nat, and ELBs) and 3 private subnets (database, web servers and ...
0
votes
1answer
52 views

Securing information against domain administrators [closed]

I'm a software developer who was given the responsibility to suggest a solution for our client that envolves infrastructure. Basically our project consists on two softwares for the audit department. ...
-3
votes
2answers
124 views

Designing a network architecture [closed]

I am building a network architecture from scratch for a small company (~20 users). I plan to use the "classical" model: -A server that contains Active Directory -A server that contains Exchange server ...
2
votes
1answer
482 views

How to secure and audit outbound traffic in an enterprise environment?

What follows is a long-winded background to preface the following question: What is the industry best-practice (or what recommendations would you give) for securing outbound traffic in an enterprise ...
21
votes
4answers
1k views

Customer site is out of IP addresses, they want to go from /24 to /12 netmask… Bad idea?

One of my client sites called to ask me to change the subnet masks of the Linux servers I manage there while they re-IP/change the netmask of their network based on a 10.0.0.x scheme. "Can you change ...
1
vote
1answer
519 views

Can I split static IP range between 2 routers, with an upstream switch?

My ISP provides static IP range x.y.z.112 to 127. At the moment, my existing router is configured with ROUTER A (existing settings) WAN IP: x.y.z.114 Mask: x.y.z.240 Gateway: x.y.z.113 I want to ...
1
vote
1answer
135 views

How Does EoR Design Work with Multi-tiered Data Center Topology

I just did a ton of reading about the different multi-tier network topology options as outlined by Cisco, and now that I'm looking at the physical options (End of Row (EoR) vs Top of Rack(ToR)), I ...
8
votes
2answers
2k views

Can someone tell me what is meant by “layer 2 adjacency”?

I am working on designing the logical topology for a new data center rollout. I'm reading "Cisco Data Center Infrastructure 2.5 Design Guide" and going with the multi-tier design. There are multiple ...
0
votes
2answers
249 views

Do I need to place a physical server/host within the DMZ to host servers/applications?

We are moving to a new office, and part is to review our current LAN/WAN and server access to/from the web. I understand how the DMZ works, but can't figure out if I need a physical server/host to be ...
-3
votes
1answer
80 views

Design network with redundancy [closed]

I need to build a redundant solution for my company. The idea is to have internet provided by two different ISP in order that if one link goes down the other link will take over. This should be done ...
0
votes
1answer
87 views

Where to begin with IPv6 [closed]

I am fairly familiar with setting-up IPv4 networks for bigger server configurations, only now I wanted to start familiarizing myself with doing the same for IPv6. I have been Googling for the second ...
2
votes
2answers
92 views

A tricky converged VoIP design

A client (roughly 30 people) wants to replace their existing analog phone system with VoIP. However: they have dual Ethernet drops to some desks, but not all their (recently purchased) router does ...
2
votes
3answers
317 views

Designing a persistent asynchronous TCP protocol

I have got a collection of web sites that need to send time-sensitive messages to host machines all over my metro area, each on its own generally dynamic IP. Until now, I have been doing this the way ...
5
votes
1answer
221 views

In what scenarios would a VLAN not align 1:1 with a subnet?

Under what scenarios would a VLAN not align with a subnet. I've been told that genearlly they always go 1 to 1. What are some examples or scenarios, and reasons for anything besides that, and for what ...
2
votes
1answer
1k views

How do mixed wireless clients (b/g/n) effect total throughput of an access point?

Say you are planning a network based around access points that support the full range of 802.11 protocols on 2.4Ghz(b/g/n). How will a mixed set of clients effect the total throughput possible through ...
1
vote
2answers
1k views

What is the network topology symbol for a KVM switch?

I've been tasked with putting together some network diagrams in Visio and we have some IP-based KVM switches that need to be captured. I've been relying on the Cisco Network Topology Icons for the ...
6
votes
4answers
3k views

Network design help needed (main office + branch offices + central server)

I have a head office and a number of suboffices. Both head office and suboffices need to access some corporate server, which is physically in the head office. But suboffices should not be able to ...
0
votes
1answer
108 views

place of domain controller and exchange in network

I am searching for the best practice of securely deploying windows domain controller and exchange in a small-medium size network (50+ users, 20+ virtual servers). The topology is single firewall ...
0
votes
3answers
129 views

vlan segmentation for developers and version control servers [closed]

Suppose there are 50 developers who access the server hosting the version control system (subversion for example). Would you put developers and svn server to same vlan (since this communication is ...
-1
votes
1answer
288 views

Setting a proxy server on my network

I try to install a proxy server on my network, using squid. My network architecture is something like this: ISP <- server 1 - or router - (with static IP and CoovaChilli on it) <- LAN. At ...
3
votes
3answers
341 views

How best to decouple a web service from its publicly-available domain names?

I'm trying to design a system that allows for multiple public endpoints that funnel into a single web service. The web service must be able to determine which endpoint was the intended destination of ...
2
votes
2answers
166 views

Changing the network address of a Windows 2000 AD domain

The situation: Two formerly completely separate Windows 2000 AD domains need to be connected to a common router. (The reason why is not important.) Unfortunately (for me), both domains currently have ...
0
votes
1answer
141 views

VPN tunnel, different subnet for all users?

We have a VPN setup for each of our three branches. I understand that each router should be on a different subnet to the router that it's connecting to, but do the routers need to be on a different ...
2
votes
2answers
5k views

Routing between subnets with one router?

I have a Draytek Vigor 2820 which is connected to three gigabit Netgear Layer 2 switches. Currently the network is fairly simple, 192.168.1.0/24. One the network I have 7 servers, around 50 ...
2
votes
1answer
155 views

Using VLANs that are routed together?

I have a quick question that's bugging me the more I read about VLANs. So far I understand that they are useful for dividing the network into sub-sections, but if you route them together does that ...
2
votes
1answer
197 views

Need guidance on network design in multi-building campus

How can we create a secured, segmented network among multiple buildings when all the data has to go through a single cable? Background: I work for a non-profit organization that has 5 buildings on ...
3
votes
5answers
2k views

Basic IP address structure

We currently have a few servers, around 30-40 workstations and 16 phones. Each device has a static IP address. As an example the standard settings for a new workstation is; IP: 192.168.1.XXX ...