日访问量5万左右的网站云服务器配置建议
背景： - 托管旅游相关网站 - 每天大约有 50,000 名访客，按惯例全天分布。 - 所有静态内容均通过 RackSpace CDN 提供 - 运行 SQL Server 2008 R2 Web Edition + Windows Server 2008 R2、IIS 7
选项的 64 位 Windows 环境（两者成本相同）： 1. 用于 DB + Web 的单一云服务器，具有 8 GB RAM - 4 个虚拟 CPU 核心 2. 2 台 4GB 服务器，一台用于数据库，一台用于 Web - 每台服务器有 2 个虚拟 CPU 核心
目前我拥有配备 12 GB RAM + 双四核 CPU 的专用服务器（听起来很简单，但我正在考虑迁移到云，因为选项 3）服务器持续受到 SQL sa 暴力攻击，可用性不稳定
问题： 考虑到大约的使用情况和平台，专家建议的是更好的配置选项，请注意 2 之间的 CPU 核心差异。
我正在从专用服务器转移，因为该服务器获得数百万次 sa 密码尝试，即使在获得新的 IP 和服务器后，它也显示相同的攻击这降低了我对提供商设置的信心。该网站 10 次中有 7 次没有被拉起。
Background:
- Hosting a Travel related website
- Roughly 50,000 Visitors /day, distributed with usual spread across the day .
- All Static content served via RackSpace CDN
- 64 Bit Windows Environment Running SQL Server 2008 R2 Web Edition + Windows Server 2008 R2, IIS 7
Options (same cost for both):
1. Single Cloud Server for DB + Web with 8 GB of RAM - 4 Virtual CPU Cores
2. 2 4GB Servers one for DB and one for Web - 2 Virtual CPU Cores on each
Currently I have Dedicated Server with 12 GB RAM + Dual Quad Core CPU (Sounds like no brainer with this but I am considering moving to cloud because option 3 server is continuously under brute force SQL sa attack and availability is shaky.
Question:
Considering approx usage and platform what would the experts recommend is better configuration option, please note CPU cores difference between 2.
I am moving from dedicated server as that server gets millions of sa password attempts and even after getting new IP and Server it shows same attacks which decreases my confidence in provider setup. The site does not pull up 7 times out of 10.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
对我来说，你的选项 1 似乎不错，但有一个故障转移选项。也许您可以考虑将 2 台服务器放在一个负载均衡器下。
关于您转向云解决方案的原因..
- 请注意，SQL 暴力攻击可能不会仅仅因为您迁移到云而停止。最简单、快速的解决方法是阻止 sql 端口被除本地主机和 Web 服务器之外的外部服务器访问。因此，建议您使用防火墙阻止端口 1433，否则我认为您会带来麻烦。
此外，Sql 注入攻击也不可能仅仅因为您迁移到云而停止。您的网站代码必须能够防止此类攻击。建议您将网站转移到一个好的内容管理系统，如 joomla(php)、mambo (php) 或 dotnetnuke(asp.net)，因为此类系统是经过精心构建的。它们提供的基本功能之一就是防止此类注入攻击。
我个人也做过同样的事情，从自定义的 asp .net 网站迁移到 dotnetnuke，并且从未后悔过这个决定。
To me, your Option 1 seems good but though with a Failover option. May be you can consider putting 2 servers under a load balancer.
Regarding your reasons to move for a Cloud solution..
- Please note that SQL brute force attacks may not stop just because you move to cloud. The easiest and quick fix for this is to block the sql port from being accessed by external servers except your localhost and webserver. So suggest you block port 1433 using firewall or otherwise you are inviting trouble in my opinion.
Also Sql injection attacks also are not likely to stop just because you moved to cloud. Your website code must be capable of preventing such attacks. Suggest you move your website to a good content management system like joomla(php), mambo (php) or dotnetnuke(asp.net) as systems like these are built with great care. And one of the basic features they provide is to prevent such injection attacks.
I personally have done the same by moving from a custom asp .net website to dotnetnuke and have never regretted the decision.
如果不知道应用程序的配置文件，则很难给出建议，例如数据库负载有多大，您是否在其前面使用缓存等。
一般来说，使用选项 2 时，数据库将需要比网络服务器更多的 RAM
It's difficult to give a recommendation without knowing the profile of the app e.g. how heavy is the DB load, are you using a cache infrontbof it etc.
In general with option 2 the DB will need more RAM than the webserver