6 votes
Accepted

Restricting access to a specific domain on AWS

Option 1. Make your ALB's default target group an empty target group, with no instances. This is a valid configuration. 100% of the requests sent to that target group will always fail, so those ...
Michael - sqlbot's user avatar
5 votes

Kubernetes cluster shared storage and backup solutions

It’s the same storage you use as a backend for your running virtual machines, say NFSv3/v4, iSCSI and FC. Concepts behind are very similar. You might want to read the Docker/Kubernetes backup ...
BaronSamedi1958's user avatar
3 votes
Accepted

Seperating web server from database over public network

That level of latency is just fine for talking to a database. Many high traffic sites use a similar architecture and may even have higher latencies to their databases. I wouldn't worry about that. ...
Michael Hampton's user avatar
3 votes
Accepted

Server Colocation vs AWS for Hospital System

Option 3: use ioncube to encrypt the code. This prevents reverse engineering or tampering and allows you to visibly assign licenses (and print the licensee on-screen). The client can then run the ...
John Keates's user avatar
3 votes

Faking CPU architecture on Debian

You would need to emulate an AMD64 / x86 processor in your ARM setup in order to execute binaries designed for AMD64 / x86. While emulation is technically possible, it will be slow. One needs to ...
Tero Kilkanen's user avatar
3 votes
Accepted

Print Infrastructure: How many LAN printers is too many?

if all of these PC's that will only be used by one person were connected to the network, how much bandwidth will be eaten up as a result? Probably not enough to even be noticeable unless your users ...
joeqwerty's user avatar
  • 111k
2 votes

Is it good practice to set HTTP headers in the load balancer?

In my opinion it doesn't matter where headers are set. The advantage of setting headers in Nginx is they're really quite simple to change, compared with changing code, deploying, etc. I've had two ...
Tim's user avatar
  • 32.9k
2 votes

Should io and cpu intensive servers be separated in kubernetes cluster?

Some things to consider: If you are using rotating disks, then you may want to have separate disks for Ceph and for random Kubernetes tasks. That way random I/O from kubernetes tasks don't break the ...
Eric Tune's user avatar
  • 155
2 votes
Accepted

How can I get my local network machines to call local web server by URL?

What is the best (priority to fastest set up time) way to accomplish this? Not BIND. Edit the c:\windows\system32\drivers\etc\hosts file on each desktop and point those names to 192.168.0.5. 192....
TessellatingHeckler's user avatar
2 votes
Accepted

Ceph or Gluster for implementing big NAS

First design: Gluster + (NFS OR GaneshaNFS) in cluster No access VM. In this case Gluster has simpler architecture than CephFS. Gluster has some rules regarding adding nodes and capacity. It's ok, ...
dario's user avatar
  • 131
2 votes
Accepted

Maintenance of nginx server with zero downtime

One possibility is to install a second nginx server and set up keepalived on both of them. Each server has its own unique IP address. In addition, keepalived allows you do define a floating IP ...
Oliver's user avatar
  • 6,028
2 votes

Wake On Demand (Load Balanced Solutions ?)

Possibly the easiest solution, fully transparent: select a "WoL server": that can be a tiny creditcard computer, or a service on an already present machine - anything you can run a packet capture on ...
Zac67's user avatar
  • 11.7k
2 votes
Accepted

Architecting for microservices application

Ok, first up you've got a few different services doing the same thing there so you want to evaluate whether you need them all. Azure CDN and Front Door both offer the same local point of presence and ...
Sam Cogan's user avatar
  • 39k
2 votes

How poll lots of external services from aws in a scalable and self-healing way

What is your actual use case? You gave an example of monitoring git repos, but the solution could be different if this isn't what you're actually doing. Serverless This sounds like a textbook use ...
Tim's user avatar
  • 32.9k
2 votes

Setup AWS infrastructure to let customers drop files

Some ideas: AWS Transfer provides a managed sFtp front end to S3, user management here. Beware it's about US$216 per month to enable the service and $0.04 per GB, plus I think you have to pay for AWS ...
Tim's user avatar
  • 32.9k
1 vote
Accepted

Azure microservices deployment

OK, the first choice is how you want to package your applications, containers or not containers. Using containers may make development and deployment of your applications easier, but if you have no ...
Sam Cogan's user avatar
  • 39k
1 vote
Accepted

Middle sized company server architecture

Yes, separating applications is standard practice. Limiting the number of things installed on any one instance is easier to maintain, and better security isolation. Sure you could implement with VMs ...
John Mahowald's user avatar
1 vote

How to get multiple DNS Geo balancing entry points

Some DNS hosting providers (and when you host your own dns some products allow you to do the same) allow you to set up geodns where, depending on the source IP-address of a dns requests, you can ...
Bob's user avatar
  • 6,003
1 vote

Using ports on business firewall

You can certainly use the other switch ports on the ATP800 if you want. But if you do then you are limited to whatever configuration and features it provides, which may or may not meet your needs. If ...
Michael Hampton's user avatar
1 vote

What's the rationale behind using reverse-proxy in front of an application server?

If we rule out the load balancing and security purposes like this, Nginx might still be useful, as it has better performance serving static content. This way, Nginx can serve static assets while the ...
Esa Jokinen's user avatar
  • 49.8k
1 vote
Accepted

AWS cloud architecture

So Two methods I can think of that should work for you without a DB table of Jobs but still allow DB access if you need it. Highly scalable serverless Would be to use an API Gateway and set up a ...
Martin Barker's user avatar
1 vote

PCI addresses of 2 network ports differ only in "device function" field => they belong to the same NIC?

82599ES datasheet(p. 64) states: PCIe device numbers identify logical devices within the physical device (the 82599 is a physical device). The 82599 implements a single logical device with two ...
Necto's user avatar
  • 163
1 vote

Should io and cpu intensive servers be separated in kubernetes cluster?

Should you run Ceph in Kubernetes? If you are looking to use Ceph to provide PVs for your containers you should run it outside of Kubernetes. If you are looking to run Ceph using DaemonSet and ...
Kenneth Owens's user avatar
1 vote

Can I use (these) old servers to test for a setup on a real environment?

Sorry my reputation is not allowing me to add a comment. It seems the only reasonable option for you is to connect 24GB server with the 12 bay drive-shelve using SCSI cables, so you will be able to ...
Mikhail Zakharov's user avatar
1 vote

Windows Server 2016 setup

It really depends on your useage and app loads, no one but you can say if this is a good setup or not without a proper analysis. I'd go with a hardware RAID 1 using the HP smart array raid ...
Noor Khaldi's user avatar
  • 3,879
1 vote
Accepted

Latency issues when inserting content to China

Both the distance and the meddling middleboxes add latency, there is no avoiding that. There may be other locations to host the database with an acceptable latency compromise. That much latency will ...
John Mahowald's user avatar
1 vote

How can I get my local network machines to call local web server by URL?

The fastest will be installing the dnsmasq package depending on your Linux distros(Arch/CentOS/RHEL/Ubuntu). Keep all the entries in /etc/hosts on your DNS server (which is using dnsmasq). Point all ...
Linux Cli Aik's user avatar
1 vote

how to forward TCP requests through a reverse proxy towards multiple data services (Mysql, hadoop, Aurora, mssql … etc)

HAProxy is proxy and load balancer for HTTP and TCP. It supports routing based on TCP payload which you'll probably need. For HTTP traffic you can enforce SSL/TLS. TCP is application specific. ...
dario's user avatar
  • 131
1 vote

how to forward TCP requests through a reverse proxy towards multiple data services (Mysql, hadoop, Aurora, mssql … etc)

try using haproxy. I think that's what you are looking for. You can google it and checkout their site an you could also benefit from watching this
Michael's user avatar
  • 375
1 vote

Is it good practice to set HTTP headers in the load balancer?

As a developer I would also say take into account development environments. We only have a load balancer in our production environment and our main preprod environment and the development ...
Barry Pollard's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible