2022 Developer Survey is open! Take survey.

Questions tagged [architecture]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
101 views

Forward traffic to a redundant container if master fails in Kubernetes

I have a k8 cluster with a backend service (BS) and a database service (DS). DS has a pod that contains a single PgBouncer container (a proxy for a Postgres server). BS sends its database requests to ...
user avatar
0 votes
1 answer
82 views

(Dis-)Advantages of using HTTP/2 or HTTP/3 for backend connections (reverse proxy -> backend)?

What are the advantages and disadvantages of using HTTP/2 or even HTTP/3 for connections between reverse proxies and backends? I haven't really come across this and only ever see H2 and H2 deployed in ...
user avatar
  • 228
1 vote
2 answers
66 views

AWS Architecture Advice - multiple EC2 instances with shared database / file system with dynamic start and stop

I am very new at cloud architecture but have decent application development experience. Right now, I am in the process of making a large computational pipeline more accessible to 5-10 users via a web ...
user avatar
-1 votes
1 answer
41 views

Setup AWS infrastructure to let customers drop files

// Perhaps this is too broad of a question but I've never done any AWS before and am a bit in the weeds - Will delete question if community deems bad. Using AWS, I want to setup an endpoint where ...
user avatar
  • 1,461
1 vote
1 answer
44 views

Benefits of separate RDBMS server

I'd like to compare the benefits of two hosting architectures for a small server (meaning a 2-core CPU and 250GB SSD, with 100GB dedicated for data, is more than enough), consisting mostly of a custom ...
user avatar
  • 355
0 votes
2 answers
71 views

Middle sized company server architecture

I am designing server for middle sized company which should offer services as accountancy software, property record software, file server etc. My idea is using Hyper V server as type 1 hypervisor. As ...
user avatar
0 votes
0 answers
46 views

How to implement firewall to grant network access for VPN users as-needed (per-user principle of least privilege, OpenVPN)

How can I setup OpenVPN in conjunction with my firewall in such a way that my VPN users' traffic is DROPed by default to all network resources, and only ACCEPTed through the firewall if that user ...
user avatar
2 votes
2 answers
123 views

How to get multiple DNS Geo balancing entry points

I am facing a problem. I will set up a CDN with multiple dedicated servers in multiple zones (Asia, US, Eu), and I will set up an entry point with Nginx proxy with geoip routing. But with this ...
user avatar
1 vote
0 answers
8 views

Deployable services on Azure Stacks HCI

What is the list of the resources/services that can be deployed to a hybrid Azure Stacks HCI appliance? Context I am doing an assessment about whether existing on-public-cloud applications can be ...
user avatar
1 vote
0 answers
19 views

Cost-Effective Database Architecture for 2000-3000 concurrent users | AWM Cloud

We have conducted the exam of 2000 concurrent users this week. And it went smoothly. Our Architecture was, we used an AWS AutoScaling setup with 5 servers running at the start (each has 2CPU, 8GB RAM)....
user avatar
1 vote
2 answers
44 views

Using ports on business firewall

I have question regarding network architecture with very close view on FW device port usage on business firewalls like Zyxel ATP800. For example, this FW has 12 customizable ports (WAN,LAN, etc) I ...
user avatar
  • 13
0 votes
0 answers
32 views

How to make a remote server be invisible to a web user

I have a webserver www.example.com that takes user input and calculates results on a remote server <form action="www2.example.com/action.cgi"> Now the user is on the second server. How ...
user avatar
0 votes
1 answer
216 views

docker-compose + traefik - direct traffic to services outside the docker-compose network

I apologize in advance for the length - but this is interesting, especially for architects and traefik wizards. The Challange: The bottom line is, I'm hoping that there's a setup in which we can ...
user avatar
0 votes
0 answers
103 views

Staging environment keeping up to date with new prod data

In most companies I've seen, the prod/staging dichotomy is articulated as follows, using Facebook's live feed as a running example: prod (obviously) stays up to date with new incoming posts, messages,...
user avatar
  • 109
0 votes
0 answers
32 views

Best mysql database architecture for a worldwide project

I would like to know your opinion about how to build the best database architecture posible. This is a website, let's say it is a forum, with traffic from everywhere around the globe. I'm trying to ...
user avatar
  • 1
0 votes
1 answer
52 views

What's the rationale behind using reverse-proxy in front of an application server?

Why do application server documentations always recommend using a reverse-proxy like Nginx? Take a random app server like Gunicorn or a built in server for NPM, what's the rationale behind using Nginx ...
user avatar
3 votes
2 answers
222 views

Kubernetes cluster shared storage and backup solutions

Which shared storage solutions are common for Kubernetes cluster to implement shared storage persistence for containers? NFS on NAS / iSCSI somehow? How do you backup the data on a Kubernetes with ...
user avatar
  • 98
0 votes
1 answer
72 views

Azure microservices deployment [closed]

I want to develop and host my portfolio on Azure, since I have free money every month thanks to the MSP Program. My portfolio will be made of 3 services: a frontend app using React a backend app ...
user avatar
0 votes
1 answer
66 views

Wake On Demand (Load Balanced Solutions ?)

I'm out of idea facing a challenging situation : Wake up a server on demand. The problem Wake-up a physical server that listen on specific port, when an incoming packet arrives. There may be a ...
user avatar
0 votes
1 answer
87 views

Server Infrastructure - China / Australia

I've been working for a while on developing a custom intranet for a client in Australia for the last few years. The difficult part is that, it needs to be accessed as much by the Chinese team as the ...
user avatar
1 vote
1 answer
165 views

Architecting for microservices application

I am not sure whether this is a right forum to ask question with respect to the infrastructure architecture. But posting the question hoping so: One of my customer has a web application which is ...
user avatar
2 votes
0 answers
51 views

Changing architecture while upgrading (ubuntu 16lts)?

I wonder if there is a way to change architecture (from 32 to 64bits), even upgrading (or not) from 16.04lts to 18.04lts ? I've looked at do-release-upgrade and other options, but I saw nothing about ...
user avatar
0 votes
1 answer
351 views

Api gateway for Microservices with Google Cloud Functions

Inputs For example, we have a few services. Account service Product service Payment service Each service is a separate Google Cloud Function. Each service has its own HTTP API. For example, the ...
user avatar
  • 1
0 votes
2 answers
30 views

How poll lots of external services from aws in a scalable and self-healing way [closed]

I have a set of external services which I want to poll continuously in short intervals (about 30seconds) from AWS. For example, I have a set of git repos which I want to poll for changes to trigger ci ...
user avatar
  • 723
1 vote
0 answers
27 views

Is there a multi-zone multi-service global dashboard for AWS?

Is there any easy way to watch the list of all products in AWS for a single account? I'm currently manually making a "for each geographical zone" "for each service" see it's dashboard, so I can ...
user avatar
0 votes
0 answers
202 views

AWS - Encrypting/Decrypting sensitive consumer data - Does my workflow look secure?

I will be using AES-256 symmetric encryption VIA Open SSL. Please have a look at my workflow and let me know if it looks secure. Encryption workflow 1: APP will encrypt data securely using Open SSL ...
user avatar
4 votes
1 answer
143 views

AWS cloud architecture

I'm trying to figure out how to deploy my applications on AWS. I have very limited DevOps experience and I'm not sure if my design is good. I have two application, a web application that handles ...
user avatar
  • 43
0 votes
0 answers
47 views

Sharing single page application for multiple customers

I'm looking for information to implement the following architecture: One Single Page Application hosted on AWS S3 + Cloudfront distribution - domain example.com A single API accessed by the single ...
user avatar
  • 159
0 votes
0 answers
221 views

Proper way to set up web server for single-page application

What I have usually done with single-page applications is to have a single monolithic application server that returns both HTML and responds to AJAX requests. I'd put all AJAX endpoints (typically ...
user avatar
3 votes
1 answer
3k views

Ceph or Gluster for implementing big NAS

We are planning to build NAS solution which will be primarily used via NFS and CIFS and workloads ranging from various archival application to more “real-time processing”. The NAS will not be used as ...
user avatar
  • 33
1 vote
1 answer
675 views

Maintenance of nginx server with zero downtime

I manage a few servers and for the sake of the question let's consider these three: nginx server: it only runs nginx and serves static files, responses from the disk cache, or passes requests to the ...
user avatar
1 vote
1 answer
4k views

Restricting access to a specific domain on AWS

Our current setup is ALB -> Target Group -> EC2 instances At the moment it's possible to access the EC2 servers behind the load balancer using the IP address of the ALB, the DNS Name (e.g. ...
user avatar
  • 201
1 vote
3 answers
108 views

Server Colocation vs AWS for Hospital System

I have created a software solution for use by hospitals. It uses PHP / MySQL and cannot be compiled into binaries. A hospital that is interested in licensing this software is asking for the PHP code ...
user avatar
-2 votes
1 answer
46 views

Can I use (these) old servers to test for a setup on a real environment? [closed]

I'm new to servers and a friend of mine just gave me 7 free servers from the early 2000's and 2008. 3x 1950 Poweredge (III) Single 2.0ghz CPU 4 cores. 2gb RAM. 64 bit architecture. 1x Unnammed ...
user avatar
  • 315
0 votes
2 answers
73 views

Windows Server 2016 setup [closed]

I have physical server with the following configuration: HP ProLiant DL320e Gen8 v2, E3-1231v3, 32 GB, 2x1 TB I plan to install MS Windows Server 2016 Datacenter and create multiple virtual machines ...
user avatar
  • 11
2 votes
0 answers
135 views

What is best practice design for internal traffic between microservices?

I have two PHP written microservices A & B. Endpoints are a.example.com and b.example.com. Both services need to be public accessible. In addition, service B makes a lot of curl requests to a....
user avatar
  • 423
4 votes
1 answer
108 views

Latency issues when inserting content to China [closed]

Background We have an app that will write into a postgres db hosted in Frankfurt datacenter. The app is installed in each of the 8 sites we have around the world, from China, Korea, India , Germany, ...
user avatar
  • 119
2 votes
2 answers
3k views

Is it possible to restrict access to specific domain/path through VPN on AWS

Our current setup is: Client -> ALB -> Target Group -> auto-scaled instances We have some urls that we would like to "hide" behind VPN access such as: Client -> VPN -> ALB -> ...
user avatar
  • 143
0 votes
1 answer
1k views

BMC TrueSight Architecture Questions & Review

I have been preparing for a TrueSight deployment for some time now but would like to share my high level architecture with everyone and get some feedback as well as some questions I would like to ...
user avatar
-4 votes
1 answer
957 views

Faking CPU architecture on Debian [closed]

I have a server which uses the armhf (armv7l, Cortex A9 ARMv7 to be precise) CPU architecture. I've been trying to install a certain package on it, but that doesn't work. First off, APT mentioned it ...
user avatar
  • 286
1 vote
1 answer
193 views

PCI addresses of 2 network ports differ only in "device function" field => they belong to the same NIC?

I have multiple 10G ethernet ports on my server. Here is lspci for some of them: 81:00.0 Ethernet controller: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection (rev 01) 81:00.1 ...
user avatar
  • 163
3 votes
2 answers
176 views

Should io and cpu intensive servers be separated in kubernetes cluster?

We are designing a new cluster architecture for our web service and are planing to use Ceph object storage and kubernetes for our services. for optimizing our servers We have different options: Use ...
user avatar
1 vote
3 answers
3k views

How can I get my local network machines to call local web server by URL?

I have four computers connected to a single switch - unconnected to the internet. One of the computers (the large one in the picture) is more powerful than the others and is running Ubuntu, with ...
user avatar
0 votes
2 answers
4k views

how to forward TCP requests through a reverse proxy towards multiple data services (Mysql, hadoop, Aurora, mssql … etc)

I'm trying to solve an architecture design puzzle, it's about designing an infra for keeping data and servers as much secured/hidden as possible, here are requirements: *I want to hide the internal ...
user avatar
  • 1
1 vote
3 answers
2k views

Is it good practice to set HTTP headers in the load balancer?

I am managing a setup where there are two ngnix application servers behind an nginx reverse proxy. I would like to set some headers like X-XSS-Protection or Strict-Transport-Security. Currently, it's ...
user avatar
1 vote
1 answer
298 views

Docker : container by app with LAMP included or LAMP container only?

I have server with 20/30 sites to hosts and I would like to use Docker containers for scalability, maintenability and security. After few searches, I found 2 approaches : one container per ...
user avatar
  • 127
0 votes
1 answer
190 views

How to share data between web applications?

I got two web applications, one customer facing and one for internal usage. Both are using a PostgreSQL database. What are the approaches I could take to share data between these applications? Both ...
user avatar
  • 1
1 vote
1 answer
233 views

api connecting from WAN to LAN?

I'm not an application developer - Ill start off with that caveat. In Brief; our development team have asked for me to open a series of ports from WAN to LAN completely bypassing our DMZ. They say ...
user avatar
  • 138
3 votes
1 answer
25 views

Should our traffic drive our system design or our system design drive our traffic?

A few weeks ago, I have moved to a new company as Linux system administrator, they are going to start a project of moving production servers infrastructure from a data center to Amazon AWS. They are ...
user avatar
1 vote
0 answers
255 views

How does the Azure Web Apps architecture look like?

I've had a few outages of 10 to 15 minutes, because apparently Microsoft had a 'blip' on their storages. They told me that it is because of a shared file system between the instances (making it a ...
user avatar
  • 455