• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Question Multi server security on Plesk

Alireza Famili

Basic Pleskian
Hi

I have this scenario and I want to see if there is something I can do to have a more secure implementation.

I have an application. I plan to put the database in a second server and also do replication for HA.

So here I thought I should have at least 3 servers (all VMs) :
1- Server 1: Application + web servers --> This server will have web access
2- Server 2: Master database server (database 1) --> This server has local access to server 1
3- Server 3: Slave database server (database2) --> This server has local access to server 2 (and 1)

Now, first of all, what do you think about this setup?
Second and more Plesk related question is:

I can setup Plesk on S1 and bring up database 1 (s2) under database servers. I can bring database 2 on S3 as well to show up under databases for easy backup and other dbm purposes.
Now with this, have I nullified all my efforts to separate db from web access?
 
Now, first of all, what do you think about this setup?
I think that this is quite a workable and good configuration, but somewhat redundant in my opinion. Although I do not know your goals, maybe it is the optimal solution for you.
 
Thank you IgorG

I have installed Plesk on S1 only. I have added S2 and S3 as database servers so it shows in the databases in the subscription. This gives great power and ease of use as the admin can use PMA and use Plesk's backup scheduler.

But since s1 has web access, I think my efforts to separate db from internet is now redundant right? Should I delete the database servers and only connect to my db's from my application?
 
Back
Top