Remote secured storage load balanced highly available resilient architecture overview and deployment guide by Salo Shp

1. REMOTE SECURED STORAGE
SALO SHP

2. HLD architecture
Application
Storage
Data sync
Users
DNS
Authentication
HTTP
BLOB
Backup site

3. Licence
OS
CE / PE CE / PE
Language
Database
RHEL7 / 16.04CentOS7 / 14.04 / 16.04
PHP 7.0, 7.1Python 2.7
MariaDB MariaDB
Frontend Apache 2.4 / NginxApache 2.4 / Nginx
Cache Memcached APCu / Redis / Memcached

4. Requirements
Number of users, expected load
Data locality
Local + multisite resiliency
Security, DDOS mitigation, admin protection
Deployment, day 2 ops
Object vs. Block distribution

5. Development environment
eth0 / wlan0 dev node
docker0
https://github.com/nylox/
br-cnc

6. Development environment
Available Operating systems
ArchLinux
Ubuntu
CentOS / RHEL
Preinstalled with GIT, Ansible, Python, libvirt
br-cnc - command and control bridge

7. Base node
eth0 - DHCP
Service or
Container
base node
monitoring node
cloud image
docker0

8. Base node
Available Operating systems - cloud images of
ArchLinux
Ubuntu
CentOS / RHEL
Secured
Preinstalled with
Container / Docker tools
Monitoring and logging tools

9. WebApp node
eth0:{80,443}
loop:3080
eth0
172.16.0.1-N
EIP/FIP
x.x.x.x
WebApp node

10. WebApp node
Serves application web pages
Services can be run as containers
Preinstalled with
web server at localhost
proxy at external connection

11. Mediator node
eth0
172.16.2.1-3
Mediator node
eth0:6379
eth0:11211
database node
Application

12. Mediator node
Serves Cache requests
Services can be run as containers
Preinstalled with
Memory cache mechanisms

13. Database node #v1
eth0
172.16.1.1-3
Database node
eth0:4567
loop:3306
Other database node
Application

14. Database node #v2
eth0 172.16.1.1-3
VIP 172.16.16.16
eth0:4567
loop:33306
Other database node
Application
VIP:3306
Database node

15. Database node
Serves relational database
Services can be run as containers
Preinstalled with
relational database

16. Internal VPC - 172.16.0.0/12
DB connection diagram #1
172.16.0.1172.16.1.1 172.16.1.2 172.16.1.3

17. DB connection diagram #2
172.16.0.1172.16.1.1 172.16.1.2
172.16.1.3
VIP 172.16.16.16
Internal VPC - 172.16.0.0/12
External / WAN 0.0.0.0/0

18. Name lookup Overview #1
1
2
N
filez.consul.domain.local
:8600
:8600
:8600
:53
:53
:80
:80
http://172.16.16.16:80/filez

19. Name lookup Overview #2
www.domain.local
:80
:53
http://172.16.16.16:80/filez
VIP - 172.16.16.16/12

20. ARCHITECTURE
DISCUSSIONS

21. Discussions
Object vs. Block distribution
Netapp s3 avail?
Sync policy
failure recovery
LB method
Webapp Containers?
what to expose - UI? SDK? CLI? API?

22. QUESTIONS? IMPLEMENTATION? VISIT US!
SALO SHP
HTTPS://NYLOX.IO