REMOTE SECURED STORAGE
SALO SHP
HLD architecture
Application
Storage
Data sync
Users
DNS
Authentication
HTTP
BLOB
Backup site
Licence
OS
CE / PE CE / PE
Language
Database
RHEL7 / 16.04CentOS7 / 14.04 / 16.04
PHP 7.0, 7.1Python 2.7
MariaDB MariaDB
Frontend Apache 2.4 / NginxApache 2.4 / Nginx
Cache Memcached APCu / Redis / Memcached
Requirements
Number of users, expected load

Data locality

Local + multisite resiliency

Security, DDOS mitigation, admin protection

Deployment, day 2 ops

Object vs. Block distribution
Development environment
eth0 / wlan0 dev node
docker0
https://github.com/nylox/
br-cnc
Development environment
Available Operating systems

ArchLinux

Ubuntu

CentOS / RHEL

Preinstalled with GIT, Ansible, Python, libvirt

br-cnc - command and control bridge
Base node
eth0 - DHCP
Service or
Container
base node
monitoring node
cloud image
docker0
Base node
Available Operating systems - cloud images of

ArchLinux

Ubuntu

CentOS / RHEL

Secured

Preinstalled with

Container / Docker tools

Monitoring and logging tools
WebApp node
eth0:{80,443}
loop:3080
eth0

172.16.0.1-N
EIP/FIP

x.x.x.x
WebApp node
WebApp node
Serves application web pages

Services can be run as containers

Preinstalled with

web server at localhost

proxy at external connection
Mediator node
eth0

172.16.2.1-3
Mediator node
eth0:6379
eth0:11211
database node
Application
Mediator node
Serves Cache requests

Services can be run as containers

Preinstalled with

Memory cache mechanisms
Database node #v1
eth0

172.16.1.1-3
Database node
eth0:4567
loop:3306
Other database node
Application
Database node #v2
eth0 172.16.1.1-3

VIP 172.16.16.16
eth0:4567
loop:33306
Other database node
Application
VIP:3306
Database node
Database node
Serves relational database

Services can be run as containers

Preinstalled with

relational database
Internal VPC - 172.16.0.0/12
DB connection diagram #1
172.16.0.1172.16.1.1 172.16.1.2 172.16.1.3
DB connection diagram #2
172.16.0.1172.16.1.1 172.16.1.2
172.16.1.3
VIP 172.16.16.16
Internal VPC - 172.16.0.0/12
External / WAN 0.0.0.0/0
Name lookup Overview #1
1
2
N
filez.consul.domain.local
:8600
:8600
:8600
:53
:53
:80
:80
http://172.16.16.16:80/filez
Name lookup Overview #2
www.domain.local
:80
:53
http://172.16.16.16:80/filez
VIP - 172.16.16.16/12
ARCHITECTURE
DISCUSSIONS
Discussions
Object vs. Block distribution

Netapp s3 avail?

Sync policy

failure recovery

LB method

Webapp Containers?

what to expose - UI? SDK? CLI? API?
QUESTIONS? IMPLEMENTATION? VISIT US!
SALO SHP
HTTPS://NYLOX.IO

Remote secured storage