Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [network-design]

The tag has no usage guidance.

0
votes
0answers
12 views

Is a GIS Tile Server reading from a distributed Postgres database a good production design or not?

We're preparing to migrate our current two-server architecture to two new servers, and I would like to make the wisest possible decision in how we utilize these machines. Our current setup has ...
0
votes
1answer
54 views

Can one device simultaneously be a reverse proxy, load balancer, and firewall?

From my understanding you have: Reverse Proxy: A device standing between internal servers and the internet. Some goals: SSL termination, caching, obfuscation, more freedom to change internal ...
1
vote
0answers
4 views

Networking bits to number of subnets [duplicate]

How does one use the value of networking bits of a class A address to find the number of subnet bits and host bits? For example, with a subnet mask of /22, what would be the process of finding the ...
1
vote
0answers
37 views

Should servers at the datacenter be in the same or different Active Directory to our office?

We have 4 servers in a managed datacenter (including 2 local Domain Controllers) to host our web applications. Our 20 person office uses Azure AD. Engineers/DevOps access our servers via RDP (using ...
1
vote
1answer
67 views

VLAN/Subnet Design

I am trying to get my head around the practical implementation of VLANs/Subnets. I currently have 3 HP v1910 switches with the following subnets/VLANS; 192.168.20.0/24 Production Server (7 servers ...
6
votes
1answer
3k views

Connect AWS route53 domain name with K8s LoadBalancer Service

What I'm trying to do Create a Kubernetes environment with a single API gateway service that is mapped to a DNS address. What I have done: 1) I went to AWS Route53 service and created a subdomain. 2)...
-6
votes
1answer
85 views

How to learn network administration [closed]

I already know the basics about networks. Where can I learn intermediate-advanced networking. How to become professional in this subject. I have a lot of practice but I want to learn everything ...
0
votes
4answers
314 views

What's the purpose of local storage hdd in Blade servers with virtualization?

I'm designing lab with a Dell M1000e and 3 M620 blade servers. Each blade server has 2 local HDD of 130GB on RAID 1. My first attempt is to install ESXi in an SD card or USB key so my local storage ...
1
vote
1answer
255 views

DNS External Resolvers Needed?

I found the picture shown below several years ago and as I'm currently studying about DNS and BIND, I wanted to understand and build the setup shown here. I do understand about the (aggregate) caching-...
0
votes
0answers
28 views

Design enterprise architecture for an information system [duplicate]

I am trying to design an architecture for an information system that will have 2 million active users in the first 3 years, and it plans to scale with 30% in the next 3 years. My questions are as ...
-1
votes
1answer
107 views

Create vswitches pn ESXI for PFsense

iam trying to build a new network infrastructure on the new blace and i have: 3 ISP WAN Links one dedicated server with one Lan card One cisco Managed switch - SF200 Model server for ERP system so ...
1
vote
1answer
168 views

networking devices for structured cabling - building and campus distributors

Which type of network hardware devices (Router vs Swtich) you would use as a campus distributor in a structured cabling project? It seems logical to use switches as building distributor, we can ...
4
votes
2answers
184 views

Do you trust LACP?

Are there any reasons why I should not rely on LACP when designing network topology? I exactly mean L2 switch to hypervisor connection, so it is the place where agregated traffic of VMs cumulates. We ...
0
votes
1answer
156 views

How to use another IP-address for outgoing traffic?

Background I run a server with two external IPv4 addresses. IP-address A (IP-A) and IP-address B (IP-B). Goal I would like to access IP-A over HTTPS port 443 and SSH port 22 only. IP-B shouldn't ...
0
votes
0answers
153 views

avoid data leak by block internet access for PCs, but allow internet access through remote desktop

In a small network(in my company), I would like to block some computers(PCs) to access the internet, so that sensitive data or files in those PCs can not be leaked. But I still need users of the PCs ...
0
votes
0answers
17 views

Branch Office Server vs VPN [duplicate]

Historically our branch offices have had their own servers to do DNS, Active Directory and a few other services. But the number of people working out of our branch office has shrunk to about 4 people. ...
3
votes
1answer
177 views

Cloud architecture design

I am designing a cloud architecture on AWS for a system processing large number of entities. I hope that this is the correct StackExchange for this question (SO did not seem appropriate to me - feel ...
0
votes
2answers
71 views

load balancer installing on database server virtual machine [closed]

I have a simple layout of my site, a load balancer sitting in front of 3 app servers which request the database. I've 4 VMs available, 3 VMs for 3 app servers, and one VM for database. Is it wise that ...
8
votes
1answer
3k views

Are VLan's used to split my switch into segments?

I'm trying to plan for the following Small Office network setup: 3x Internet connections Things connected to the port in each colour can only get routed through their corresponding internet port. ...
2
votes
2answers
196 views

Potential traffic issues on one big(ger) subnet

Posts like this: Most traffic in a corporate LAN is client to server nowadays, and a router not very well setup rather becomes a bottleneck AND a SPOF. and 200+ clients on a subnet wasn't a ...
-2
votes
1answer
217 views

Why Use a NAT Instance? [closed]

Consider the following VPC: Public subnet with app servers and a separate NAT instance. Private subnet with database server. What benefits do we gain by using a stand alone NAT? EDIT: Why use ...
0
votes
1answer
766 views

TCP Load balancing

I need to implement an architecture that can serve 3 million GPS Devices sending Location Updates/Alerts (every 10 secs) to our system for processing. Features: 1) TCP communication. 1) Long lived ...
-1
votes
1answer
86 views

What are common server architectures to build a reliable website [closed]

Sorry, if my question looks too general, but I am looking for an answers to specific problems that I listed below and would appriciate any help. My website is growing in popularity and I would like ...
1
vote
0answers
158 views

how to design network for virtual machines with just one nic

for the past week or so i've been recovering from the shock that i have literally no idea how my isp's network works, by getting a new box and trying to do a sensible design from scratch. our design ...
2
votes
2answers
480 views

When should another AD domain be created purely to reduce replication traffic

I'm going over some hypothetical AD design scenarios for learning purposes. Lets say I have one domain and two physical locations, sites and DCs. The sites are connected via a limited bandwidth WAN ...
15
votes
2answers
2k views

Campus Network Design - Firewalls

I am designing a campus network, and the design looks like this: LINX is The London Internet Exchange and JANET is Joint Academic Network. My goal is an almost-fully redundant with high availability,...
2
votes
1answer
127 views

“Full acces”s vs “only web access” to a network [closed]

I'm having trouble with some of the wording used by my lecturer on a exercise he gave us. The goal of the exercise is to design a network for three "labs" in our University: A general purpose lab ...
0
votes
2answers
1k views

Calculating required uplink capacity of network switch [duplicate]

Is there any common method (usable in practice) for estimating the uplink capacity of switch based on known number of users connected to this switch and the maximum internet speed they are allowed. ...
0
votes
1answer
461 views

Why use a converged network design in Hyper-V?

I am reorienting myself to Hyper-V in its Windows Server 2012 R2 incarnation and have spent a fair bit of time reading Microsoft's Designing Your Cloud Infrastructure documentation. I am in the SME ...
1
vote
1answer
3k views

how can I present a network diagram on the building that has 3 floors

How can I present a network diagram on the building that has 3 floors? The requirements are to separate the users in one LAN according to their department, what confuses me is on the second and on the ...
2
votes
3answers
1k views

DHCP Relay vs Multi-Homed DHCP Server

I'm sketching out a new network topology and I'm unsure of how to solve the issue of DHCP between two VLANs. 10.50.2.0/23 will hold the majority of our users, corporate wifi, printers etc. 10.250.3.0/...
0
votes
1answer
652 views

Where do local ISPs' core networks connect to? [closed]

Where do local ISPs' core networks connect to? Do they connect to the Internet Backbone owned by AT&T and Sprint (among others) or do they connect to an IXP (Internet eXchange Point)?
1
vote
1answer
1k views

LAN Redundancy - NIC, Cables + Switch?

I'm trying to move to a HA solution and would like to understand what hardware is required to have redundancy in the NICs, switch and cables. The diagrams below show how I envisage a non-redundant ...
0
votes
2answers
106 views

Is it possible to have subnets for hosts connected to a switch? [closed]

re-EDIT I can not provide my attempts and what wen't wrong, because I am only doing the design and not actually implementing right now. Although the goal of this structure is a school network. I ...
1
vote
1answer
1k views

Routing Strategy for Multiple VPCs on AWS

I am planning to setup multiple Virtual Private Clouds (VPC) on AWS. These VPCs will be located in different geos. Each VPC will have public as well as private instances. I need to incorporate an ...
13
votes
1answer
932 views

“Hostile” network in the company - please comment on a security setup

I have a little specific problem here that I want (need) to solve in a satisfactory way. My company has multiple (IPv4) networks that are controlled by our router sitting in the middle. Typical ...
1
vote
2answers
151 views

How to exclude requests from unwanted sources

Scenario: Client buys our analytics services and includes our analytics SDK in his mobile app. Users who download the app will start sending us lots of data. When the client stops paying for our ...
1
vote
1answer
1k views

DNS architecture sanity check

I'm designing DNS service for a network and had a few architecture questions. The O'Reilly/ Cricket Liu DNS book and the NIST DNS security guide don't address these questions except in a very general ...
6
votes
1answer
2k views

Designing segmented LAN with fairly shared hi-speed internet access on a tight budget

With another member of the owners' association, I've been tasked with designing and setting up shared, hi-speed, internet access, for our apartment building. We have very little budget and hope to be ...
0
votes
2answers
1k views

Network design vm virtualization in small office [closed]

I just recently bought a 16gb ram, Intel i7 quad core Mac mini to be used as the central point of entry to my network and am looking for advice on how to design a network suitable for a small office. ...
-1
votes
1answer
108 views

Simulate two domains on one machine to support work/home isolation [closed]

Problem statement: How can I support isolation of identities on a signle in-home network that supports both personal and business resources? I know the Windows NT servers have plenty of methods of ...
5
votes
3answers
3k views

Where should I setup a staging environment in Amazon VPC? And testing?

I setup the production environment for my service in an Amazon VPC in Oregon: 2 availability zones 1 public subnet (including bastion, nat, and ELBs) and 3 private subnets (database, web servers and ...
0
votes
1answer
57 views

Securing information against domain administrators [closed]

I'm a software developer who was given the responsibility to suggest a solution for our client that envolves infrastructure. Basically our project consists on two softwares for the audit department. ...
-3
votes
2answers
162 views

Designing a network architecture [closed]

I am building a network architecture from scratch for a small company (~20 users). I plan to use the "classical" model: -A server that contains Active Directory -A server that contains Exchange server ...
3
votes
1answer
3k views

How to secure and audit outbound traffic in an enterprise environment?

What follows is a long-winded background to preface the following question: What is the industry best-practice (or what recommendations would you give) for securing outbound traffic in an enterprise ...
22
votes
4answers
2k views

Customer site is out of IP addresses, they want to go from /24 to /12 netmask… Bad idea?

One of my client sites called to ask me to change the subnet masks of the Linux servers I manage there while they re-IP/change the netmask of their network based on a 10.0.0.x scheme. "Can you change ...
1
vote
1answer
2k views

Can I split static IP range between 2 routers, with an upstream switch?

My ISP provides static IP range x.y.z.112 to 127. At the moment, my existing router is configured with ROUTER A (existing settings) WAN IP: x.y.z.114 Mask: x.y.z.240 Gateway: x.y.z.113 I want to ...
1
vote
1answer
206 views

How Does EoR Design Work with Multi-tiered Data Center Topology

I just did a ton of reading about the different multi-tier network topology options as outlined by Cisco, and now that I'm looking at the physical options (End of Row (EoR) vs Top of Rack(ToR)), I ...
10
votes
2answers
8k views

Can someone tell me what is meant by “layer 2 adjacency”?

I am working on designing the logical topology for a new data center rollout. I'm reading "Cisco Data Center Infrastructure 2.5 Design Guide" and going with the multi-tier design. There are multiple ...
1
vote
2answers
745 views

Do I need to place a physical server/host within the DMZ to host servers/applications?

We are moving to a new office, and part is to review our current LAN/WAN and server access to/from the web. I understand how the DMZ works, but can't figure out if I need a physical server/host to be ...