I am currently running one box with the regular firewall, antivirus, webserver, mysql plus ffmpeg for media conversion. Due to increasing server load, I am planning on expanding to more boxes. It appears that the first step is to stick mysql in its own box. Are there any rules of thumb about keeping a firewall in its own box for security purposes, or which services go particularly well together? Thanks for the help.