Questions tagged [architecture]
The architecture tag has no usage guidance.
175
questions
0
votes
0
answers
30
views
Should VLANs and AD match organizational chart for implementing 802.1x with Dynamic VLAN?
I am experiencing an issue while trying to understand the best way to implement 802.1x (EAP Chaining with AD as the identity service) in a corporate environment. The following questions have arisen ...
1
vote
0
answers
43
views
Hardware RAID status on SMBUS architecture
This question is kind of theoretical, but I found no other StackExchange site to suite it better. I would like to know a little more about SMBUS and if it is possible to collect data from random PCI-E ...
- 508
2
votes
2
answers
539
views
Why is the Kubernetes scheduler a separate process from the controller manager?
This is a question about the design of Kubernetes, I don't have a specific technical problem to solve, but I'm trying to understand the thoughts behind some of its architecture.
All explanations about ...
- 121
0
votes
0
answers
138
views
How to expose multiple databases in local network for other applications to connect with them
I am following up this question here, in which I made the incorrect assumption of being able to access a database using HTTP.
Because I seem to lack conceptual knowledge, I would like to ask a more ...
- 101
0
votes
0
answers
17
views
Is two web servers and one shared file server a good idea? [duplicate]
Current problem:
we have a single web server that hosts a website with user generated content
the server constantly needs more upgrades to keep up with the storage space
it's hard to make changes ...
- 101
0
votes
1
answer
223
views
Multiple WP websites, high availability setup
We are moving to a new production environment and I came up with the following setup. For the 20-25 client websites we have, I wanted to do the following:
DigitalOcean Load Balancer
Two DO Droplets ...
- 11
0
votes
1
answer
59
views
Print Infrastructure: How many LAN printers is too many?
I am a new network administrator for a larger company that is planning on moving to a new building. Currently I am working on designing a layout for each office, as well as the warehouse in terms of ...
- 1
0
votes
1
answer
66
views
Redundant server with internet access
First sorry for the noob question, but I am kind of lost here.
Here is what I have: An N number of workstations that are communicating with private servers. Server 1 is production and server 2 is ...
- 123
1
vote
1
answer
177
views
Forward traffic to a redundant container if master fails in Kubernetes
I have a k8 cluster with a backend service (BS) and a database service (DS).
DS has a pod that contains a single PgBouncer container (a proxy for a Postgres server). BS sends its database requests to ...
- 113
1
vote
1
answer
1k
views
(Dis-)Advantages of using HTTP/2 or HTTP/3 for backend connections (reverse proxy -> backend)?
What are the advantages and disadvantages of using HTTP/2 or even HTTP/3 for connections between reverse proxies and backends?
I haven't really come across this and only ever see H2 and H2 deployed in ...
- 238
1
vote
2
answers
431
views
AWS Architecture Advice - multiple EC2 instances with shared database / file system with dynamic start and stop
I am very new at cloud architecture but have decent application development experience. Right now, I am in the process of making a large computational pipeline more accessible to 5-10 users via a web ...
- 11
-1
votes
1
answer
62
views
Setup AWS infrastructure to let customers drop files
// Perhaps this is too broad of a question but I've never done any AWS before and am a bit in the weeds - Will delete question if community deems bad.
Using AWS, I want to setup an endpoint where ...
- 1,631
1
vote
1
answer
59
views
Benefits of separate RDBMS server
I'd like to compare the benefits of two hosting architectures for a small server (meaning a 2-core CPU and 250GB SSD, with 100GB dedicated for data, is more than enough), consisting mostly of a custom ...
- 422
0
votes
2
answers
104
views
Middle sized company server architecture
I am designing server for middle sized company which should offer services as accountancy software, property record software, file server etc. My idea is using Hyper V server as type 1 hypervisor. As ...
0
votes
0
answers
177
views
How to implement firewall to grant network access for VPN users as-needed (per-user principle of least privilege, OpenVPN)
How can I setup OpenVPN in conjunction with my firewall in such a way that my VPN users' traffic is DROPed by default to all network resources, and only ACCEPTed through the firewall if that user ...
- 779
2
votes
2
answers
296
views
How to get multiple DNS Geo balancing entry points
I am facing a problem. I will set up a CDN with multiple dedicated servers in multiple zones (Asia, US, Eu), and I will set up an entry point with Nginx proxy with geoip routing.
But with this ...
- 21
1
vote
0
answers
11
views
Deployable services on Azure Stacks HCI
What is the list of the resources/services that can be deployed to a hybrid Azure Stacks HCI appliance?
Context
I am doing an assessment about whether existing on-public-cloud applications can be ...
- 2,359
1
vote
0
answers
77
views
Cost-Effective Database Architecture for 2000-3000 concurrent users | AWM Cloud
We have conducted the exam of 2000 concurrent users this week. And it went smoothly.
Our Architecture was, we used an AWS AutoScaling setup with 5 servers running at the start (each has 2CPU, 8GB RAM)....
- 11
1
vote
2
answers
53
views
Using ports on business firewall
I have question regarding network architecture with very close view on FW device port usage on business firewalls like Zyxel ATP800.
For example, this FW has 12 customizable ports (WAN,LAN, etc)
I ...
- 13
0
votes
0
answers
38
views
How to make a remote server be invisible to a web user
I have a webserver www.example.com that takes user input and calculates results on a remote server
<form action="www2.example.com/action.cgi">
Now the user is on the second server. How ...
- 11
0
votes
1
answer
320
views
docker-compose + traefik - direct traffic to services outside the docker-compose network
I apologize in advance for the length - but this is interesting, especially for architects and traefik wizards.
The Challange:
The bottom line is, I'm hoping that there's a setup in which we can ...
0
votes
0
answers
296
views
Staging environment keeping up to date with new prod data
In most companies I've seen, the prod/staging dichotomy is articulated as follows, using Facebook's live feed as a running example:
prod (obviously) stays up to date with new incoming posts, messages,...
- 109
0
votes
0
answers
46
views
Best mysql database architecture for a worldwide project
I would like to know your opinion about how to build the best database architecture posible.
This is a website, let's say it is a forum, with traffic from everywhere around the globe.
I'm trying to ...
- 1
0
votes
1
answer
132
views
What's the rationale behind using reverse-proxy in front of an application server?
Why do application server documentations always recommend using a reverse-proxy like Nginx? Take a random app server like Gunicorn or a built in server for NPM, what's the rationale behind using Nginx ...
- 262
3
votes
2
answers
238
views
Kubernetes cluster shared storage and backup solutions
Which shared storage solutions are common for Kubernetes cluster to implement shared storage persistence for containers? NFS on NAS / iSCSI somehow?
How do you backup the data on a Kubernetes with ...
- 98
0
votes
1
answer
77
views
Azure microservices deployment [closed]
I want to develop and host my portfolio on Azure, since I have free money every month thanks to the MSP Program.
My portfolio will be made of 3 services:
a frontend app using React
a backend app ...
0
votes
1
answer
213
views
Wake On Demand (Load Balanced Solutions ?)
I'm out of idea facing a challenging situation : Wake up a server on demand.
The problem
Wake-up a physical server that listen on specific port, when an incoming packet arrives.
There may be a ...
- 101
0
votes
1
answer
95
views
Server Infrastructure - China / Australia
I've been working for a while on developing a custom intranet for a client in Australia for the last few years. The difficult part is that, it needs to be accessed as much by the Chinese team as the ...
- 1
1
vote
1
answer
247
views
Architecting for microservices application
I am not sure whether this is a right forum to ask question with respect to the infrastructure architecture. But posting the question hoping so:
One of my customer has a web application which is ...
- 764
2
votes
0
answers
76
views
Changing architecture while upgrading (ubuntu 16lts)?
I wonder if there is a way to change architecture (from 32 to 64bits), even upgrading (or not) from 16.04lts to 18.04lts ?
I've looked at do-release-upgrade and other options, but I saw nothing about ...
- 21
0
votes
1
answer
592
views
Api gateway for Microservices with Google Cloud Functions
Inputs
For example, we have a few services.
Account service
Product service
Payment service
Each service is a separate Google Cloud Function.
Each service has its own HTTP API. For example, the ...
google-cloud-platform
0
votes
2
answers
60
views
How poll lots of external services from aws in a scalable and self-healing way [closed]
I have a set of external services which I want to poll continuously in short intervals (about 30seconds) from AWS. For example, I have a set of git repos which I want to poll for changes to trigger ci ...
- 733
1
vote
0
answers
28
views
Is there a multi-zone multi-service global dashboard for AWS?
Is there any easy way to watch the list of all products in AWS for a single account?
I'm currently manually making a "for each geographical zone" "for each service" see it's dashboard, so I can ...
- 365
0
votes
0
answers
279
views
AWS - Encrypting/Decrypting sensitive consumer data - Does my workflow look secure?
I will be using AES-256 symmetric encryption VIA Open SSL. Please have a look at my workflow and let me know if it looks secure.
Encryption workflow
1: APP will encrypt data securely using Open SSL ...
- 113
4
votes
1
answer
148
views
AWS cloud architecture
I'm trying to figure out how to deploy my applications on AWS. I have very limited DevOps experience and I'm not sure if my design is good.
I have two application, a web application that handles ...
- 43
0
votes
0
answers
56
views
Sharing single page application for multiple customers
I'm looking for information to implement the following architecture:
One Single Page Application hosted on AWS S3 + Cloudfront distribution - domain example.com
A single API accessed by the single ...
- 159
0
votes
0
answers
237
views
Proper way to set up web server for single-page application
What I have usually done with single-page applications is to have a single monolithic application server that returns both HTML and responds to AJAX requests. I'd put all AJAX endpoints (typically ...
- 131
3
votes
1
answer
4k
views
Ceph or Gluster for implementing big NAS
We are planning to build NAS solution which will be primarily used via NFS and CIFS and workloads ranging from various archival application to more “real-time processing”. The NAS will not be used as ...
- 33
1
vote
1
answer
1k
views
Maintenance of nginx server with zero downtime
I manage a few servers and for the sake of the question let's consider these three:
nginx server: it only runs nginx and serves static files, responses from the disk cache, or passes requests to the ...
- 145
2
votes
2
answers
6k
views
Restricting access to a specific domain on AWS
Our current setup is
ALB -> Target Group -> EC2 instances
At the moment it's possible to access the EC2 servers behind the load balancer using the IP address of the ALB, the DNS Name (e.g. ...
- 231
1
vote
3
answers
112
views
Server Colocation vs AWS for Hospital System
I have created a software solution for use by hospitals. It uses PHP / MySQL and cannot be compiled into binaries. A hospital that is interested in licensing this software is asking for the PHP code ...
user396722
-2
votes
1
answer
49
views
Can I use (these) old servers to test for a setup on a real environment? [closed]
I'm new to servers and a friend of mine just gave me 7 free servers from the early 2000's and 2008.
3x 1950 Poweredge (III) Single 2.0ghz CPU 4 cores. 2gb RAM. 64 bit architecture.
1x Unnammed ...
- 335
0
votes
2
answers
79
views
Windows Server 2016 setup [closed]
I have physical server with the following configuration: HP ProLiant DL320e Gen8 v2, E3-1231v3, 32 GB, 2x1 TB
I plan to install MS Windows Server 2016 Datacenter and create multiple virtual machines ...
- 11
2
votes
0
answers
185
views
What is best practice design for internal traffic between microservices?
I have two PHP written microservices A & B. Endpoints are a.example.com and b.example.com. Both services need to be public accessible. In addition, service B makes a lot of curl requests to a....
- 533
4
votes
1
answer
109
views
Latency issues when inserting content to China [closed]
Background
We have an app that will write into a postgres db hosted in Frankfurt datacenter.
The app is installed in each of the 8 sites we have around the world, from China, Korea, India , Germany, ...
- 119
3
votes
2
answers
4k
views
Is it possible to restrict access to specific domain/path through VPN on AWS
Our current setup is:
Client -> ALB -> Target Group -> auto-scaled instances
We have some urls that we would like to "hide" behind VPN access such as:
Client -> VPN -> ALB -> ...
- 163
0
votes
1
answer
1k
views
BMC TrueSight Architecture Questions & Review
I have been preparing for a TrueSight deployment for some time now but would like to share my high level architecture with everyone and get some feedback as well as some questions I would like to ...
-4
votes
1
answer
1k
views
Faking CPU architecture on Debian [closed]
I have a server which uses the armhf (armv7l, Cortex A9 ARMv7 to be precise) CPU architecture.
I've been trying to install a certain package on it, but that doesn't work.
First off, APT mentioned it ...
- 266
1
vote
1
answer
321
views
PCI addresses of 2 network ports differ only in "device function" field => they belong to the same NIC?
I have multiple 10G ethernet ports on my server. Here is lspci for some of them:
81:00.0 Ethernet controller: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection (rev 01)
81:00.1 ...
- 163
3
votes
2
answers
225
views
Should io and cpu intensive servers be separated in kubernetes cluster?
We are designing a new cluster architecture for our web service and are planing to use Ceph object storage and kubernetes for our services. for optimizing our servers We have different options:
Use ...
- 153