Questions tagged [architecture]
The architecture tag has no usage guidance.
167
questions
1
vote
1
answer
101
views
Forward traffic to a redundant container if master fails in Kubernetes
I have a k8 cluster with a backend service (BS) and a database service (DS).
DS has a pod that contains a single PgBouncer container (a proxy for a Postgres server). BS sends its database requests to ...
- 111
0
votes
1
answer
82
views
(Dis-)Advantages of using HTTP/2 or HTTP/3 for backend connections (reverse proxy -> backend)?
What are the advantages and disadvantages of using HTTP/2 or even HTTP/3 for connections between reverse proxies and backends?
I haven't really come across this and only ever see H2 and H2 deployed in ...
- 228
1
vote
2
answers
66
views
AWS Architecture Advice - multiple EC2 instances with shared database / file system with dynamic start and stop
I am very new at cloud architecture but have decent application development experience. Right now, I am in the process of making a large computational pipeline more accessible to 5-10 users via a web ...
- 11
-1
votes
1
answer
41
views
Setup AWS infrastructure to let customers drop files
// Perhaps this is too broad of a question but I've never done any AWS before and am a bit in the weeds - Will delete question if community deems bad.
Using AWS, I want to setup an endpoint where ...
- 1,461
1
vote
1
answer
44
views
Benefits of separate RDBMS server
I'd like to compare the benefits of two hosting architectures for a small server (meaning a 2-core CPU and 250GB SSD, with 100GB dedicated for data, is more than enough), consisting mostly of a custom ...
- 355
0
votes
2
answers
71
views
Middle sized company server architecture
I am designing server for middle sized company which should offer services as accountancy software, property record software, file server etc. My idea is using Hyper V server as type 1 hypervisor. As ...
0
votes
0
answers
46
views
How to implement firewall to grant network access for VPN users as-needed (per-user principle of least privilege, OpenVPN)
How can I setup OpenVPN in conjunction with my firewall in such a way that my VPN users' traffic is DROPed by default to all network resources, and only ACCEPTed through the firewall if that user ...
- 455
2
votes
2
answers
123
views
How to get multiple DNS Geo balancing entry points
I am facing a problem. I will set up a CDN with multiple dedicated servers in multiple zones (Asia, US, Eu), and I will set up an entry point with Nginx proxy with geoip routing.
But with this ...
- 21
1
vote
0
answers
8
views
Deployable services on Azure Stacks HCI
What is the list of the resources/services that can be deployed to a hybrid Azure Stacks HCI appliance?
Context
I am doing an assessment about whether existing on-public-cloud applications can be ...
- 2,329
1
vote
0
answers
19
views
Cost-Effective Database Architecture for 2000-3000 concurrent users | AWM Cloud
We have conducted the exam of 2000 concurrent users this week. And it went smoothly.
Our Architecture was, we used an AWS AutoScaling setup with 5 servers running at the start (each has 2CPU, 8GB RAM)....
- 11
1
vote
2
answers
44
views
Using ports on business firewall
I have question regarding network architecture with very close view on FW device port usage on business firewalls like Zyxel ATP800.
For example, this FW has 12 customizable ports (WAN,LAN, etc)
I ...
- 13
0
votes
0
answers
32
views
How to make a remote server be invisible to a web user
I have a webserver www.example.com that takes user input and calculates results on a remote server
<form action="www2.example.com/action.cgi">
Now the user is on the second server. How ...
- 11
0
votes
1
answer
216
views
docker-compose + traefik - direct traffic to services outside the docker-compose network
I apologize in advance for the length - but this is interesting, especially for architects and traefik wizards.
The Challange:
The bottom line is, I'm hoping that there's a setup in which we can ...
0
votes
0
answers
103
views
Staging environment keeping up to date with new prod data
In most companies I've seen, the prod/staging dichotomy is articulated as follows, using Facebook's live feed as a running example:
prod (obviously) stays up to date with new incoming posts, messages,...
- 109
0
votes
0
answers
32
views
Best mysql database architecture for a worldwide project
I would like to know your opinion about how to build the best database architecture posible.
This is a website, let's say it is a forum, with traffic from everywhere around the globe.
I'm trying to ...
- 1
0
votes
1
answer
52
views
What's the rationale behind using reverse-proxy in front of an application server?
Why do application server documentations always recommend using a reverse-proxy like Nginx? Take a random app server like Gunicorn or a built in server for NPM, what's the rationale behind using Nginx ...
- 252
3
votes
2
answers
222
views
Kubernetes cluster shared storage and backup solutions
Which shared storage solutions are common for Kubernetes cluster to implement shared storage persistence for containers? NFS on NAS / iSCSI somehow?
How do you backup the data on a Kubernetes with ...
- 98
0
votes
1
answer
72
views
Azure microservices deployment [closed]
I want to develop and host my portfolio on Azure, since I have free money every month thanks to the MSP Program.
My portfolio will be made of 3 services:
a frontend app using React
a backend app ...
0
votes
1
answer
66
views
Wake On Demand (Load Balanced Solutions ?)
I'm out of idea facing a challenging situation : Wake up a server on demand.
The problem
Wake-up a physical server that listen on specific port, when an incoming packet arrives.
There may be a ...
- 101
0
votes
1
answer
87
views
Server Infrastructure - China / Australia
I've been working for a while on developing a custom intranet for a client in Australia for the last few years. The difficult part is that, it needs to be accessed as much by the Chinese team as the ...
- 1
1
vote
1
answer
165
views
Architecting for microservices application
I am not sure whether this is a right forum to ask question with respect to the infrastructure architecture. But posting the question hoping so:
One of my customer has a web application which is ...
- 722
2
votes
0
answers
51
views
Changing architecture while upgrading (ubuntu 16lts)?
I wonder if there is a way to change architecture (from 32 to 64bits), even upgrading (or not) from 16.04lts to 18.04lts ?
I've looked at do-release-upgrade and other options, but I saw nothing about ...
- 21
0
votes
1
answer
351
views
Api gateway for Microservices with Google Cloud Functions
Inputs
For example, we have a few services.
Account service
Product service
Payment service
Each service is a separate Google Cloud Function.
Each service has its own HTTP API. For example, the ...
google-cloud-platform
0
votes
2
answers
30
views
How poll lots of external services from aws in a scalable and self-healing way [closed]
I have a set of external services which I want to poll continuously in short intervals (about 30seconds) from AWS. For example, I have a set of git repos which I want to poll for changes to trigger ci ...
- 723
1
vote
0
answers
27
views
Is there a multi-zone multi-service global dashboard for AWS?
Is there any easy way to watch the list of all products in AWS for a single account?
I'm currently manually making a "for each geographical zone" "for each service" see it's dashboard, so I can ...
- 235
0
votes
0
answers
202
views
AWS - Encrypting/Decrypting sensitive consumer data - Does my workflow look secure?
I will be using AES-256 symmetric encryption VIA Open SSL. Please have a look at my workflow and let me know if it looks secure.
Encryption workflow
1: APP will encrypt data securely using Open SSL ...
- 113
4
votes
1
answer
143
views
AWS cloud architecture
I'm trying to figure out how to deploy my applications on AWS. I have very limited DevOps experience and I'm not sure if my design is good.
I have two application, a web application that handles ...
- 43
0
votes
0
answers
47
views
Sharing single page application for multiple customers
I'm looking for information to implement the following architecture:
One Single Page Application hosted on AWS S3 + Cloudfront distribution - domain example.com
A single API accessed by the single ...
- 159
0
votes
0
answers
221
views
Proper way to set up web server for single-page application
What I have usually done with single-page applications is to have a single monolithic application server that returns both HTML and responds to AJAX requests. I'd put all AJAX endpoints (typically ...
- 131
3
votes
1
answer
3k
views
Ceph or Gluster for implementing big NAS
We are planning to build NAS solution which will be primarily used via NFS and CIFS and workloads ranging from various archival application to more “real-time processing”. The NAS will not be used as ...
- 33
1
vote
1
answer
675
views
Maintenance of nginx server with zero downtime
I manage a few servers and for the sake of the question let's consider these three:
nginx server: it only runs nginx and serves static files, responses from the disk cache, or passes requests to the ...
- 145
1
vote
1
answer
4k
views
Restricting access to a specific domain on AWS
Our current setup is
ALB -> Target Group -> EC2 instances
At the moment it's possible to access the EC2 servers behind the load balancer using the IP address of the ALB, the DNS Name (e.g. ...
- 201
1
vote
3
answers
108
views
Server Colocation vs AWS for Hospital System
I have created a software solution for use by hospitals. It uses PHP / MySQL and cannot be compiled into binaries. A hospital that is interested in licensing this software is asking for the PHP code ...
user396722
-2
votes
1
answer
46
views
Can I use (these) old servers to test for a setup on a real environment? [closed]
I'm new to servers and a friend of mine just gave me 7 free servers from the early 2000's and 2008.
3x 1950 Poweredge (III) Single 2.0ghz CPU 4 cores. 2gb RAM. 64 bit architecture.
1x Unnammed ...
- 315
0
votes
2
answers
73
views
Windows Server 2016 setup [closed]
I have physical server with the following configuration: HP ProLiant DL320e Gen8 v2, E3-1231v3, 32 GB, 2x1 TB
I plan to install MS Windows Server 2016 Datacenter and create multiple virtual machines ...
- 11
2
votes
0
answers
135
views
What is best practice design for internal traffic between microservices?
I have two PHP written microservices A & B. Endpoints are a.example.com and b.example.com. Both services need to be public accessible. In addition, service B makes a lot of curl requests to a....
- 423
4
votes
1
answer
108
views
Latency issues when inserting content to China [closed]
Background
We have an app that will write into a postgres db hosted in Frankfurt datacenter.
The app is installed in each of the 8 sites we have around the world, from China, Korea, India , Germany, ...
- 119
2
votes
2
answers
3k
views
Is it possible to restrict access to specific domain/path through VPN on AWS
Our current setup is:
Client -> ALB -> Target Group -> auto-scaled instances
We have some urls that we would like to "hide" behind VPN access such as:
Client -> VPN -> ALB -> ...
- 143
0
votes
1
answer
1k
views
BMC TrueSight Architecture Questions & Review
I have been preparing for a TrueSight deployment for some time now but would like to share my high level architecture with everyone and get some feedback as well as some questions I would like to ...
-4
votes
1
answer
957
views
Faking CPU architecture on Debian [closed]
I have a server which uses the armhf (armv7l, Cortex A9 ARMv7 to be precise) CPU architecture.
I've been trying to install a certain package on it, but that doesn't work.
First off, APT mentioned it ...
- 286
1
vote
1
answer
193
views
PCI addresses of 2 network ports differ only in "device function" field => they belong to the same NIC?
I have multiple 10G ethernet ports on my server. Here is lspci for some of them:
81:00.0 Ethernet controller: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection (rev 01)
81:00.1 ...
- 163
3
votes
2
answers
176
views
Should io and cpu intensive servers be separated in kubernetes cluster?
We are designing a new cluster architecture for our web service and are planing to use Ceph object storage and kubernetes for our services. for optimizing our servers We have different options:
Use ...
- 153
1
vote
3
answers
3k
views
How can I get my local network machines to call local web server by URL?
I have four computers connected to a single switch - unconnected to the internet.
One of the computers (the large one in the picture) is more powerful than the others and is running Ubuntu, with ...
- 222
0
votes
2
answers
4k
views
how to forward TCP requests through a reverse proxy towards multiple data services (Mysql, hadoop, Aurora, mssql … etc)
I'm trying to solve an architecture design puzzle, it's about designing an infra for keeping data and servers as much secured/hidden as possible, here are requirements:
*I want to hide the internal ...
- 1
1
vote
3
answers
2k
views
Is it good practice to set HTTP headers in the load balancer?
I am managing a setup where there are two ngnix application servers behind an nginx reverse proxy. I would like to set some headers like X-XSS-Protection or Strict-Transport-Security. Currently, it's ...
- 252
1
vote
1
answer
298
views
Docker : container by app with LAMP included or LAMP container only?
I have server with 20/30 sites to hosts and I would like to use Docker containers for scalability, maintenability and security.
After few searches, I found 2 approaches :
one container per ...
- 127
0
votes
1
answer
190
views
How to share data between web applications?
I got two web applications, one customer facing and one for internal usage. Both are using a PostgreSQL database. What are the approaches I could take to share data between these applications? Both ...
- 1
1
vote
1
answer
233
views
api connecting from WAN to LAN?
I'm not an application developer - Ill start off with that caveat.
In Brief; our development team have asked for me to open a series of ports from WAN to LAN completely bypassing our DMZ. They say ...
- 138
3
votes
1
answer
25
views
Should our traffic drive our system design or our system design drive our traffic?
A few weeks ago, I have moved to a new company as Linux system administrator, they are going to start a project of moving production servers infrastructure from a data center to Amazon AWS.
They are ...
- 186
1
vote
0
answers
255
views
How does the Azure Web Apps architecture look like?
I've had a few outages of 10 to 15 minutes, because apparently Microsoft had a 'blip' on their storages. They told me that it is because of a shared file system between the instances (making it a ...
- 455