+1

Regards

Geoff Higginbottom

D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581

geoff.higginbot...@shapeblue.com

-----Original Message-----
From: Erik Weber [mailto:terbol...@gmail.com]
Sent: 06 May 2015 10:44
To: dev
Subject: Re: [VOTE] Apache Cloudstack 4.5.1

On Wed, May 6, 2015 at 11:18 AM, Vadim Kimlaychuk <vadim.kimlayc...@elion.ee
> wrote:

> Geoff,
>
>         Thank you for explaination. Basically the idea behind that was to
> have (for instance) database tier and web-app tier.   Web-apps-tier servers
> have to communicate with databases, but databases are closed for
> outside world.
>
The easiest way is to have 2 NICs at web-tier VMs and route inside VM
> without need to send all the requests to VPC router.


But you're also breaking the tiering. Your database server is now fully 
accessible from the internet (or wherever you're connected to) through the web 
servers, and not just the database.

The proper way, imho, is to have a firewall between (ie. the VR), and fix the 
scaling issues instead. That's what you do in the non-cloud world as well, you 
create two tiers and put a firewall between them.

--

Erik
Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build//>
CSForge – rapid IaaS deployment framework<http://shapeblue.com/csforge/>
CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
CloudStack Software 
Engineering<http://shapeblue.com/cloudstack-software-engineering/>
CloudStack Infrastructure 
Support<http://shapeblue.com/cloudstack-infrastructure-support/>
CloudStack Bootcamp Training Courses<http://shapeblue.com/cloudstack-training/>

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a company 
registered by The Republic of South Africa and is traded under license from 
Shape Blue Ltd. ShapeBlue is a registered trademark.

Reply via email to