Questions tagged [architecture]
The architecture tag has no usage guidance.
164
questions
0
votes
0answers
42 views
Operability System docker daemon
I have a serious problem with the docker daemon administration on my Docker VM node.
And I can't quite understand what exactly is happening.
It's a VM with Ubuntu 18.04 LTS from system base, yesterday ...
0
votes
0answers
19 views
How to implement firewall to grant network access for VPN users as-needed (per-user principle of least privilege, OpenVPN)
How can I setup OpenVPN in conjunction with my firewall in such a way that my VPN users' traffic is DROPed by default to all network resources, and only ACCEPTed through the firewall if that user ...
2
votes
2answers
48 views
How to get multiple DNS Geo balancing entry points
I am facing a problem. I will set up a CDN with multiple dedicated servers in multiple zones (Asia, US, Eu), and I will set up an entry point with Nginx proxy with geoip routing.
But with this ...
0
votes
0answers
5 views
Deployable services on Azure Stacks HCI
What is the list of the resources/services that can be deployed to a hybrid Azure Stacks HCI appliance?
Context
I am doing an assessment about whether existing on-public-cloud applications can be ...
0
votes
0answers
6 views
Routing API requests to proper backend when using single domain name
Architecture question here.
I have an application (PHP/MySQL) on which each client have a diferent subdomain. I also have a subdomain dedicated to an API, which is shared among customers.
This ...
1
vote
0answers
14 views
Cost-Effective Database Architecture for 2000-3000 concurrent users | AWM Cloud
We have conducted the exam of 2000 concurrent users this week. And it went smoothly.
Our Architecture was, we used an AWS AutoScaling setup with 5 servers running at the start (each has 2CPU, 8GB RAM)....
1
vote
2answers
40 views
Using ports on business firewall
I have question regarding network architecture with very close view on FW device port usage on business firewalls like Zyxel ATP800.
For example, this FW has 12 customizable ports (WAN,LAN, etc)
I ...
0
votes
0answers
31 views
How to make a remote server be invisible to a web user
I have a webserver www.example.com that takes user input and calculates results on a remote server
<form action="www2.example.com/action.cgi">
Now the user is on the second server. How ...
0
votes
0answers
30 views
Understanding how nginx works with a CDN like Cloudfront
I run a Ubuntu 18 server on an EC2 instance, on which I installed Ghost.
Ghost automatically sets up nginx as a reverse proxy that lets the Internet see the website that runs on the local port 2368 (...
0
votes
1answer
46 views
docker-compose + traefik - direct traffic to services outside the docker-compose network
I apologize in advance for the length - but this is interesting, especially for architects and traefik wizards.
The Challange:
The bottom line is, I'm hoping that there's a setup in which we can ...
0
votes
0answers
37 views
Staging environment keeping up to date with new prod data
In most companies I've seen, the prod/staging dichotomy is articulated as follows, using Facebook's live feed as a running example:
prod (obviously) stays up to date with new incoming posts, messages,...
0
votes
0answers
30 views
Best mysql database architecture for a worldwide project
I would like to know your opinion about how to build the best database architecture posible.
This is a website, let's say it is a forum, with traffic from everywhere around the globe.
I'm trying to ...
0
votes
1answer
25 views
What's the rationale behind using reverse-proxy in front of an application server?
Why do application server documentations always recommend using a reverse-proxy like Nginx? Take a random app server like Gunicorn or a built in server for NPM, what's the rationale behind using Nginx ...
3
votes
2answers
209 views
Kubernetes cluster shared storage and backup solutions
Which shared storage solutions are common for Kubernetes cluster to implement shared storage persistence for containers? NFS on NAS / iSCSI somehow?
How do you backup the data on a Kubernetes with ...
0
votes
1answer
69 views
Azure microservices deployment [closed]
I want to develop and host my portfolio on Azure, since I have free money every month thanks to the MSP Program.
My portfolio will be made of 3 services:
a frontend app using React
a backend app ...
0
votes
1answer
51 views
Wake On Demand (Load Balanced Solutions ?)
I'm out of idea facing a challenging situation : Wake up a server on demand.
The problem
Wake-up a physical server that listen on specific port, when an incoming packet arrives.
There may be a ...
0
votes
1answer
77 views
Server Infrastructure - China / Australia
I've been working for a while on developing a custom intranet for a client in Australia for the last few years. The difficult part is that, it needs to be accessed as much by the Chinese team as the ...
1
vote
1answer
97 views
Architecting for microservices application
I am not sure whether this is a right forum to ask question with respect to the infrastructure architecture. But posting the question hoping so:
One of my customer has a web application which is ...
2
votes
0answers
38 views
Changing architecture while upgrading (ubuntu 16lts)?
I wonder if there is a way to change architecture (from 32 to 64bits), even upgrading (or not) from 16.04lts to 18.04lts ?
I've looked at do-release-upgrade and other options, but I saw nothing about ...
0
votes
1answer
233 views
Api gateway for Microservices with Google Cloud Functions
Inputs
For example, we have a few services.
Account service
Product service
Payment service
Each service is a separate Google Cloud Function.
Each service has its own HTTP API. For example, the ...
google-cloud-platform
0
votes
2answers
25 views
How poll lots of external services from aws in a scalable and self-healing way [closed]
I have a set of external services which I want to poll continuously in short intervals (about 30seconds) from AWS. For example, I have a set of git repos which I want to poll for changes to trigger ci ...
1
vote
0answers
22 views
Is there a multi-zone multi-service global dashboard for AWS?
Is there any easy way to watch the list of all products in AWS for a single account?
I'm currently manually making a "for each geographical zone" "for each service" see it's dashboard, so I can ...
0
votes
0answers
120 views
AWS - Encrypting/Decrypting sensitive consumer data - Does my workflow look secure?
I will be using AES-256 symmetric encryption VIA Open SSL. Please have a look at my workflow and let me know if it looks secure.
Encryption workflow
1: APP will encrypt data securely using Open SSL ...
4
votes
1answer
141 views
AWS cloud architecture
I'm trying to figure out how to deploy my applications on AWS. I have very limited DevOps experience and I'm not sure if my design is good.
I have two application, a web application that handles ...
0
votes
0answers
35 views
Sharing single page application for multiple customers
I'm looking for information to implement the following architecture:
One Single Page Application hosted on AWS S3 + Cloudfront distribution - domain example.com
A single API accessed by the single ...
0
votes
0answers
214 views
Proper way to set up web server for single-page application
What I have usually done with single-page applications is to have a single monolithic application server that returns both HTML and responds to AJAX requests. I'd put all AJAX endpoints (typically ...
2
votes
1answer
3k views
Ceph or Gluster for implementing big NAS
We are planning to build NAS solution which will be primarily used via NFS and CIFS and workloads ranging from various archival application to more “real-time processing”. The NAS will not be used as ...
1
vote
1answer
479 views
Maintenance of nginx server with zero downtime
I manage a few servers and for the sake of the question let's consider these three:
nginx server: it only runs nginx and serves static files, responses from the disk cache, or passes requests to the ...
1
vote
1answer
3k views
Restricting access to a specific domain on AWS
Our current setup is
ALB -> Target Group -> EC2 instances
At the moment it's possible to access the EC2 servers behind the load balancer using the IP address of the ALB, the DNS Name (e.g. ...
1
vote
3answers
104 views
Server Colocation vs AWS for Hospital System
I have created a software solution for use by hospitals. It uses PHP / MySQL and cannot be compiled into binaries. A hospital that is interested in licensing this software is asking for the PHP code ...
-2
votes
1answer
43 views
Can I use (these) old servers to test for a setup on a real environment? [closed]
I'm new to servers and a friend of mine just gave me 7 free servers from the early 2000's and 2008.
3x 1950 Poweredge (III) Single 2.0ghz CPU 4 cores. 2gb RAM. 64 bit architecture.
1x Unnammed ...
0
votes
2answers
71 views
Windows Server 2016 setup [closed]
I have physical server with the following configuration: HP ProLiant DL320e Gen8 v2, E3-1231v3, 32 GB, 2x1 TB
I plan to install MS Windows Server 2016 Datacenter and create multiple virtual machines ...
2
votes
0answers
115 views
What is best practice design for internal traffic between microservices?
I have two PHP written microservices A & B. Endpoints are a.example.com and b.example.com. Both services need to be public accessible. In addition, service B makes a lot of curl requests to a....
4
votes
1answer
103 views
Latency issues when inserting content to China [closed]
Background
We have an app that will write into a postgres db hosted in Frankfurt datacenter.
The app is installed in each of the 8 sites we have around the world, from China, Korea, India , Germany, ...
2
votes
2answers
2k views
Is it possible to restrict access to specific domain/path through VPN on AWS
Our current setup is:
Client -> ALB -> Target Group -> auto-scaled instances
We have some urls that we would like to "hide" behind VPN access such as:
Client -> VPN -> ALB -> ...
0
votes
1answer
792 views
BMC TrueSight Architecture Questions & Review
I have been preparing for a TrueSight deployment for some time now but would like to share my high level architecture with everyone and get some feedback as well as some questions I would like to ...
-4
votes
1answer
869 views
Faking CPU architecture on Debian [closed]
I have a server which uses the armhf (armv7l, Cortex A9 ARMv7 to be precise) CPU architecture.
I've been trying to install a certain package on it, but that doesn't work.
First off, APT mentioned it ...
1
vote
1answer
144 views
PCI addresses of 2 network ports differ only in “device function” field => they belong to the same NIC?
I have multiple 10G ethernet ports on my server. Here is lspci for some of them:
81:00.0 Ethernet controller: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection (rev 01)
81:00.1 ...
3
votes
2answers
158 views
Should io and cpu intensive servers be separated in kubernetes cluster?
We are designing a new cluster architecture for our web service and are planing to use Ceph object storage and kubernetes for our services. for optimizing our servers We have different options:
Use ...
1
vote
3answers
2k views
How can I get my local network machines to call local web server by URL?
I have four computers connected to a single switch - unconnected to the internet.
One of the computers (the large one in the picture) is more powerful than the others and is running Ubuntu, with ...
0
votes
2answers
3k views
how to forward TCP requests through a reverse proxy towards multiple data services (Mysql, hadoop, Aurora, mssql … etc)
I'm trying to solve an architecture design puzzle, it's about designing an infra for keeping data and servers as much secured/hidden as possible, here are requirements:
*I want to hide the internal ...
1
vote
3answers
2k views
Is it good practice to set HTTP headers in the load balancer?
I am managing a setup where there are two ngnix application servers behind an nginx reverse proxy. I would like to set some headers like X-XSS-Protection or Strict-Transport-Security. Currently, it's ...
1
vote
1answer
285 views
Docker : container by app with LAMP included or LAMP container only?
I have server with 20/30 sites to hosts and I would like to use Docker containers for scalability, maintenability and security.
After few searches, I found 2 approaches :
one container per ...
0
votes
1answer
160 views
How to share data between web applications?
I got two web applications, one customer facing and one for internal usage. Both are using a PostgreSQL database. What are the approaches I could take to share data between these applications? Both ...
1
vote
1answer
198 views
api connecting from WAN to LAN?
I'm not an application developer - Ill start off with that caveat.
In Brief; our development team have asked for me to open a series of ports from WAN to LAN completely bypassing our DMZ. They say ...
3
votes
1answer
23 views
Should our traffic drive our system design or our system design drive our traffic?
A few weeks ago, I have moved to a new company as Linux system administrator, they are going to start a project of moving production servers infrastructure from a data center to Amazon AWS.
They are ...
1
vote
0answers
247 views
How does the Azure Web Apps architecture look like?
I've had a few outages of 10 to 15 minutes, because apparently Microsoft had a 'blip' on their storages. They told me that it is because of a shared file system between the instances (making it a ...
-1
votes
1answer
99 views
Seperating web server from database over public network
How much of a risk is it splitting nginx web server from mysql database server and having them talk over public network? The database server would be in the same OVH DC but from what I understand ...
0
votes
1answer
32 views
Understanding the concept of highload application
So, I have an idea of creating highload app using Ruby on rails. However there are some questions about the conception of the project.
The main idea is
Client->Load Balancer -> Server_1 ->...
1
vote
1answer
427 views
Imap local cache server
I'am not sure if it's the good place to ask the question. I would like to know if it's possible to have a local Imap cache server. The main IMAP server is by the provider. To improve performance I ...
