+ Docs for sigma and internal ips
This commit is contained in:
parent
82d039369c
commit
7a75722733
33
readme
33
readme
@ -42,6 +42,11 @@ SSH/Ansible Host
|
|||||||
VPC. This way we only accept internal SSH connections.
|
VPC. This way we only accept internal SSH connections.
|
||||||
Rationale: To reduce surface area to the outside werld
|
Rationale: To reduce surface area to the outside werld
|
||||||
|
|
||||||
|
Reverse Proxy
|
||||||
|
This server is going to sit between Alpha & Beta as
|
||||||
|
both are going to need need to take HTTP requests
|
||||||
|
from the internet but I don't want to expose them.
|
||||||
|
|
||||||
Section 3. Codenames
|
Section 3. Codenames
|
||||||
====================
|
====================
|
||||||
|
|
||||||
@ -53,6 +58,8 @@ Beta - Static Nginx Server
|
|||||||
|
|
||||||
Gamma - Dev/Ansible host
|
Gamma - Dev/Ansible host
|
||||||
|
|
||||||
|
Sigma - Web App Reverse Proxy
|
||||||
|
|
||||||
Crete - Primary Subnet used to host stuff
|
Crete - Primary Subnet used to host stuff
|
||||||
|
|
||||||
Section 4. Network Layout
|
Section 4. Network Layout
|
||||||
@ -60,25 +67,30 @@ Section 4. Network Layout
|
|||||||
|
|
||||||
|
|
||||||
Crete
|
Crete
|
||||||
|
Subnet 10.0.0.128/26
|
||||||
Refers to the primary subnet that most services live on.
|
Refers to the primary subnet that most services live on.
|
||||||
Contains its own internet gateway as services here
|
Contains its own internet gateway as services here
|
||||||
basically require 24/7 internet access.
|
basically require 24/7 internet access.
|
||||||
> High number of web services
|
> High number of web services
|
||||||
|
|
||||||
Subnet 10.0.0.128/25
|
|
||||||
|
|
||||||
Alpha
|
Alpha
|
||||||
Public IP: not required
|
Internal IP: 10.0.0.129
|
||||||
Internal IP: 10.0.1.1
|
Web Docker Host
|
||||||
|
|
||||||
Beta
|
Beta
|
||||||
Public IP: required for public websites
|
Internal IP: 10.0.0.130
|
||||||
|
Static Web Server
|
||||||
|
|
||||||
Gamma
|
Gamma
|
||||||
Ephemeral: only up when absolutely required
|
Internal IP: 10.0.0.131
|
||||||
Will request Elastic IP when it needs one
|
Has an EIP bound however the server is only up when required.
|
||||||
however it will release the IP when not
|
|
||||||
required to reduce overall cost of running this system
|
Sigma
|
||||||
|
Internal IP: 10.0.0.132
|
||||||
|
Reverse Proxy for Alpha and Beta. Doing this means we don't have
|
||||||
|
to assign EIP's for every single one.
|
||||||
|
|
||||||
|
|
||||||
Section 5. Image's Used for Hosting
|
Section 5. Image's Used for Hosting
|
||||||
===================================
|
===================================
|
||||||
@ -104,3 +116,8 @@ Instance Types with rationale
|
|||||||
Nginx server
|
Nginx server
|
||||||
Gamma - t3.micro
|
Gamma - t3.micro
|
||||||
Ansible host
|
Ansible host
|
||||||
|
Sigma - t3.small
|
||||||
|
Using a small since we only need enough power
|
||||||
|
to supply a load balancer(of sorts). Also some
|
||||||
|
of the workers behind this are kinda large which
|
||||||
|
means we can't scrape by with something tiny
|
||||||
|
Loading…
Reference in New Issue
Block a user