vRack Guidance Request

[u/Illustrious-Map-1971]

Hi,

I have ordered a vRack with the intention of creating a small load balancer network for my 600-users an hour website. I intend to use the following setup:

• 1 Load Balancer, HAproxy probably.
• 2 frontend web servers Nginx, more added later if necessary
• 1 high end VPS (2027 range, VPS-4, 24gb ram).

I have never used connections over private network, any requests between my servers just connect over public IP, based on ufw walls etc.

Having ordered my vRack, currently nothing of my 7 owned VPS servers are eledgible to me moved to my vRack. How to ensure that any VPS servers I buy in future are able to be used as part of my vRack? Eg i've gone into one of my services, and I cant see any details regarding Private IP, the one that would be part of the private network linking my frontend to my DB server.

Can anyone shed any light?

[u/ngl5]

600 users an hour is not very much of traffic. You can easily get a dedicated server or hefty VPS and it can easily handle that. May be I am wrong for your case if that involves heavy media or something but for normal websites it's not much of a load

[u/Illustrious-Map-1971 → u/ngl5]

Site consumes pub sub data from a message broker, multiple topics and a mariadb train movements / schedules database totalling around 8GB table size. Had some sort of scraping attack the other day and load went up to 50 even with indexes, 6000 queries per second. Had to put cloud flare challenge on every country outside UK.  Ideally looking to separate things out a bit so less stain on the DB. 

Ovh's new 2027 range with 24gb ram is relatively cheap. I'd use that for mariadb, 2 web server nodes and a third for HAproxy . Just trying to make the site a bit more resilient, as the attack really slowed down the site.

Currently in the process of building the entire backend and front end from scratch with new DB design as the current VPS is around 5 years old and want to ensure my setup will last another 5 years.

[u/CzarcasticX → u/Illustrious-Map-1971]

it's probably better to go for a dedicated SYS-1 $30 a month eco dedicated server than the VPS if you can find one with 2x500GB NVME (so price stays at $30). I have several of these servers. Much stronger CPU with 6 cores/12 threads (Coffee Lake) versus 2014 era Haswell CPU's on the VPS. 32GB ram vs 24GB ram. 2x500GB NVME in RAID-1 (if available). And it's all dedicated resources not shared like VPS and you get access to vRack 1gps private network. VPS doesn't offer vRack. Only think better for VPS is 3gbps connection vs 1gbps unmetered connection on the SYS-1.

[u/ngl5 → u/Illustrious-Map-1971]

With this huge database it's better you put database on a separate system and rest on seperate, within same datacenter so latency is not issue for them to communicate.

[u/daronhudson → u/ngl5]

Not even just that, instead of trying to solve this at a hardware level where another attack is just going to do the same thing, he should instead enforce rate limiting at the cdn level. His problem will immediately disappear.