Would you put web-server on the same machine as your company internal database?
Matt Morgan
matt.morgan-fedora-list at brooklynmuseum.org
Fri Jul 16 18:13:25 UTC 2004
On 07/16/2004 01:34 PM, Apollo at Carmel Music & Entertainment wrote:
> I thinking about consolidating my two servers into one. Right now I
> have separate server for my Apache/RealMedia server and separate
> server for Samba/MySQL for internal use.
> Would you consolidate these two into one?
> My perimeter is guarded by a custom firewall machine.
>
> Apollo
>
If the Samba/MySQL box is entirely for internal use, then no, I would
not consolidate them. The cost/effort you might save in consolidating
servers will most likely be smaller than the extra work and worry you
put into the more complicated security work that's required if both
systems are on the same machine.
It may not seem like a big deal, if you're just opening specific ports
while others are closed. But you're going to worry a lot more about
holes in Apache or Real servers, or in the kernel, etc., buffer
overflows, things like that. And whenever the person in charge of it
quits ... this is the kind of thing many people don't document well.
It's a lot for the new person to figure out.
The other thing is, the odd times you have to reboot or shut down the
servers to work on them: they're doing entirely different jobs. I
wouldn't want to tell the people who work here they don't have access to
their files because I'm working on the web server, or to bring down the
web server and alienate customers when I'm working on the internal file
server. It makes more sense to consolidate, for example, the file server
and the print server, or the mail server and the proxy server--services
that have something in common. Because people who can't get access to
their files don't need to print anyway.
Since hardware is pretty cheap (and you're not saving on disk drives
really, by consolidating), probably you shouldn't consolidate.
--Matt
More information about the fedora-list
mailing list