473,662 Members | 2,551 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Web server hardware design with SQL back-end

Hi,

Still in the design process of a Windows 2003 web server with a SQL backend.
Expecting to have about 2000 visitors a day accessing lists and search
queries on a 200-300 MB db. This server will be collocated in a datacenter.
I have a few scenarios that I would appreciate in getting some
comments/criticism on:

Scenario 1:
Box 1, SBS 2003 Premium (with SQL 2000), 2GB RAM, Raid 5 HD
Based on the SBS faq, as long as visitors are not Windows authenticated, an
additional SQL Internet license is not required.
My concern with this scenario is (correct me if I'm wrong) lack of
scalability and fail-over (in the future).

Scenario 3:
Box 1, Windows 2003 Standard Edition, SQL 2000 Standard Edition, 2GB RAM,
Raid 5 HD
Do I need a processor based SQL license since it's exposed to the Internet
or is this the same case as in the SBS where an additional license is not
required?

Scenario 3:
Box 1, Windows 2003 Web Edition, 1GB RAM, Raid 1 HD
Box 2, Windows 2003 Standard Edition, SQL 2000 Standard Edition, 1GB RAM,
Raid 5 HD
Web Edition faq states that I can not deploy SQL on it. I'm guessing I can
still connect to another server's SQL.
Is this setup more secure, in the sense that the SQL is on a separate box
from the web server?

All comments are very appreciated. If you have other suggestions too, please
let me know.

Thank you

Greg


Jul 20 '05 #1
3 2545
Hi

The only option that is feasable in terms of security is the two box one.
Your web server should be on a DMZ and the database server secured behind a
firewall. I believe that you will need a per processor licence for SQL
Server see http://www.microsoft.com/sql/howtobuy/default.asp this should be
confirmed by your local microsoft dealer. As far as the hardware goes, if
you allow for expansion then you can always improve performance later if
necessary. Changes you may want to consider are a separate mirrored OS disc,
a separate disk sub-system for the log files and Raid 10 for the data files.
More on hardware can be found at:
http://www.sql-server-performance.co...e_planning.asp. You will
also need to lock down the webserver and database and plan the security
aspects of the system. See
http://www.sqlsecurity.com/DesktopDe...ndex=0&tabid=1
http://www.microsoft.com/sql/techinf...ty/default.asp
http://www.microsoft.com/security/gu...dtech/IIS.mspx

Also make sure that you have suitable backup and disaster recovery plans.
John

"Greg Adourian" <gr**@dontspam. com> wrote in message
news:F3******** *************@w eber.videotron. net...
Hi,

Still in the design process of a Windows 2003 web server with a SQL backend. Expecting to have about 2000 visitors a day accessing lists and search
queries on a 200-300 MB db. This server will be collocated in a datacenter. I have a few scenarios that I would appreciate in getting some
comments/criticism on:

Scenario 1:
Box 1, SBS 2003 Premium (with SQL 2000), 2GB RAM, Raid 5 HD
Based on the SBS faq, as long as visitors are not Windows authenticated, an additional SQL Internet license is not required.
My concern with this scenario is (correct me if I'm wrong) lack of
scalability and fail-over (in the future).

Scenario 3:
Box 1, Windows 2003 Standard Edition, SQL 2000 Standard Edition, 2GB RAM,
Raid 5 HD
Do I need a processor based SQL license since it's exposed to the Internet
or is this the same case as in the SBS where an additional license is not
required?

Scenario 3:
Box 1, Windows 2003 Web Edition, 1GB RAM, Raid 1 HD
Box 2, Windows 2003 Standard Edition, SQL 2000 Standard Edition, 1GB RAM,
Raid 5 HD
Web Edition faq states that I can not deploy SQL on it. I'm guessing I can
still connect to another server's SQL.
Is this setup more secure, in the sense that the SQL is on a separate box
from the web server?

All comments are very appreciated. If you have other suggestions too, please let me know.

Thank you

Greg

Jul 20 '05 #2
Thank you for your answers.
Do you think Win2003 Web Edition is sufficient or I would need a Windows
2003 Standard as well.

Thanks

"John Bell"

The only option that is feasable in terms of security is the two box one.
Your web server should be on a DMZ and the database server secured behind a firewall. I believe that you will need a per processor licence for SQL
Server see http://www.microsoft.com/sql/howtobuy/default.asp this should be confirmed by your local microsoft dealer. As far as the hardware goes, if
you allow for expansion then you can always improve performance later if
necessary. Changes you may want to consider are a separate mirrored OS disc, a separate disk sub-system for the log files and Raid 10 for the data files. More on hardware can be found at:
http://www.sql-server-performance.co...e_planning.asp. You will
also need to lock down the webserver and database and plan the security
aspects of the system. See
http://www.sqlsecurity.com/DesktopDe...ndex=0&tabid=1
http://www.microsoft.com/sql/techinf...ty/default.asp http://www.microsoft.com/security/gu...dtech/IIS.mspx

Also make sure that you have suitable backup and disaster recovery plans.

Jul 20 '05 #3
Hi

If you are using it to run IIS then that is what Web Edition is intended
for. This may help
http://www.microsoft.com/windowsserv...eeditions.mspx
http://www.microsoft.com/windowsserv...rview/web.mspx

You should not be running other processes on your web server as it may get
compromised.

John

"Greg A" <gr**@dontspam. com> wrote in message
news:Um******** *************@w eber.videotron. net...
Thank you for your answers.
Do you think Win2003 Web Edition is sufficient or I would need a Windows
2003 Standard as well.

Thanks

"John Bell"

The only option that is feasable in terms of security is the two box one. Your web server should be on a DMZ and the database server secured behind
a
firewall. I believe that you will need a per processor licence for SQL
Server see http://www.microsoft.com/sql/howtobuy/default.asp this should be
confirmed by your local microsoft dealer. As far as the hardware goes,

if you allow for expansion then you can always improve performance later if
necessary. Changes you may want to consider are a separate mirrored OS

disc,
a separate disk sub-system for the log files and Raid 10 for the data

files.
More on hardware can be found at:
http://www.sql-server-performance.co...e_planning.asp. You will
also need to lock down the webserver and database and plan the security
aspects of the system. See
http://www.sqlsecurity.com/DesktopDe...ndex=0&tabid=1

http://www.microsoft.com/sql/techinf...ty/default.asp
http://www.microsoft.com/security/gu...dtech/IIS.mspx

Also make sure that you have suitable backup and disaster recovery

plans.

Jul 20 '05 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

5
4332
by: Thomas Brathans | last post by:
Hi, when I try to execute the obove mentioned to synchronise the servertime by a php-script, it doesn't work. Other shell-commands work fine. Executing ntpdate <server> directly in the shell works also well. So why doesn't it work? Thanks...
35
3501
by: English Teacher | last post by:
Which would be a more useful relational database server to learn nowadays: MS SQL SERVER or ORACLE? Thanks!
0
1796
by: Cindy B | last post by:
Please send your resume and position to Cindy@AtlanticResource.com! I CAN NOT accept candidates that ARE OUTSIDE OF THE US! NO PHONE CALLS PLEASE! Email your resume to me! Position:SQL SERVER/PEOPLESOFT DBA Date: 03/07/05 Location: Richmond, VA Duration: 5 month conract to hire Salary: 65,000-80,000K Contract to Hire 5 months
6
1522
by: Bill Elgie | last post by:
This is about a mysterious slow down only. An application (split data & FE) that has run for 6 years without error with six to ten users. The hardware (not my job) has been ‘updated' and a new fast server added. The data has been moved to the server and the program exists on each separate user's pc. The original program version in Ac97 for data and program was then updated into Ac2000 as it appeared to use less resources but it is just...
3
1502
by: Dave | last post by:
I have a piece of hardware connected via serial port. I need to send a variety of commands to the box and route the responses back from the receive thread to the correct method call. So e.g. I have a method call something like: SomeCommand(inParam1, inParam2, outParam1, outParam2) { Command cmd = new Command( inParam1, inParam2); HwCommLine.Send( cmd);
6
1296
by: John | last post by:
Hi, I'm ussually just told what I will be working with, but today I was asked to choose the hardware myself. First off, it's a small company, so a $10,000 server is not an option. But also, a $500 box isn't going to cut it either. Basically, I am builing a web app which generates from 10-100 million records per calculation (yes, that's the spec). I'm using SQLServer 2000
3
2224
by: datapro01 | last post by:
I am a DB2 DBA that has been asked to become familiar enough with SQL Server in order to become actively involved in its installation, implementation, and to review database backup/recovery procedures. SQL Server will be used by a vendor packaged application. The problem is that we are awaiting word on whether it will be SQL Server 2000 or 2005 we will be working with. I have been told that there are considerable differences between the...
17
2635
by: IanIpp | last post by:
We have a 3 month old quad processor/dual core server running SQL Server 2005 and already it is getting close to hitting the CPU wall. An 8 way CPU box is prohibitively expensive and out of the question. I am looking desperately for a way to TRULY scale out SQL server...in the same way that IIS can be scaled out via App Center. The "in the box" solution for SQL Server 2005 scaling out is the DMV. Unfortunately this solution makes...
0
1556
by: Derrick | last post by:
Hello all; This is going to be a bit long...sorry... I am about to start out on a small scale client/server type system. The server will collect data from various sources (custom hardware over ethernet), and make that data available to the clients (either webservices or remoting, not sure yet). Since the hardware is networked, the clients could talk to it directly, but I don't want to put the hardware through that load since...
110
10554
by: alf | last post by:
Hi, is it possible that due to OS crash or mysql itself crash or some e.g. SCSI failure to lose all the data stored in the table (let's say million of 1KB rows). In other words what is the worst case scenario for MyISAM backend? Also is it possible to not to lose data but get them corrupted?
0
8432
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However, people are often confused as to whether an ONU can Work As a Router. In this blog post, we’ll explore What is ONU, What Is Router, ONU & Router’s main usage, and What is the difference between ONU and Router. Let’s take a closer look ! Part I. Meaning of...
0
8344
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it. First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
0
8857
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers, it seems that the internal comparison operator "<=>" tries to promote arguments from unsigned to signed. This is as boiled down as I can make it. Here is my compilation command: g++-12 -std=c++20 -Wnarrowing bit_field.cpp Here is the code in...
1
8546
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
7367
agi2029
by: agi2029 | last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own.... Now, this would greatly impact the work of software developers. The idea...
1
6186
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
4180
by: TSSRALBI | last post by:
Hello I'm a network technician in training and I need your help. I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs. The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols. I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
2
1993
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
2
1752
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.