+ Docs for sigma and internal ips

This commit is contained in:
shockrah 2021-11-25 20:45:15 -08:00
parent 82d039369c
commit 7a75722733

33
readme
View File

@ -42,6 +42,11 @@ SSH/Ansible Host
VPC. This way we only accept internal SSH connections. VPC. This way we only accept internal SSH connections.
Rationale: To reduce surface area to the outside werld Rationale: To reduce surface area to the outside werld
Reverse Proxy
This server is going to sit between Alpha & Beta as
both are going to need need to take HTTP requests
from the internet but I don't want to expose them.
Section 3. Codenames Section 3. Codenames
==================== ====================
@ -53,6 +58,8 @@ Beta - Static Nginx Server
Gamma - Dev/Ansible host Gamma - Dev/Ansible host
Sigma - Web App Reverse Proxy
Crete - Primary Subnet used to host stuff Crete - Primary Subnet used to host stuff
Section 4. Network Layout Section 4. Network Layout
@ -60,25 +67,30 @@ Section 4. Network Layout
Crete Crete
Subnet 10.0.0.128/26
Refers to the primary subnet that most services live on. Refers to the primary subnet that most services live on.
Contains its own internet gateway as services here Contains its own internet gateway as services here
basically require 24/7 internet access. basically require 24/7 internet access.
> High number of web services > High number of web services
Subnet 10.0.0.128/25
Alpha Alpha
Public IP: not required Internal IP: 10.0.0.129
Internal IP: 10.0.1.1 Web Docker Host
Beta Beta
Public IP: required for public websites Internal IP: 10.0.0.130
Static Web Server
Gamma Gamma
Ephemeral: only up when absolutely required Internal IP: 10.0.0.131
Will request Elastic IP when it needs one Has an EIP bound however the server is only up when required.
however it will release the IP when not
required to reduce overall cost of running this system Sigma
Internal IP: 10.0.0.132
Reverse Proxy for Alpha and Beta. Doing this means we don't have
to assign EIP's for every single one.
Section 5. Image's Used for Hosting Section 5. Image's Used for Hosting
=================================== ===================================
@ -104,3 +116,8 @@ Instance Types with rationale
Nginx server Nginx server
Gamma - t3.micro Gamma - t3.micro
Ansible host Ansible host
Sigma - t3.small
Using a small since we only need enough power
to supply a load balancer(of sorts). Also some
of the workers behind this are kinda large which
means we can't scrape by with something tiny