I’m frustrated with Shopify and want to move our e-commerce store to WooCommerce.
I‘m debating between Vultr and DO currently for providers and have a budget of $100/mo.
After doing some testing and initial development, we are planning on deploying 7 servers in total. This is a mix of web, database, Redis, and some management servers (either Zabbix or Prometheus).
What are the risks involved by deploying with Vultr/DO since every server must have a public IP?
Should we utilize the private VPCs or make our DB and Redis endpoints use TLS on public IPs? These would be restricted with the providers cloud firewall as first line of defense and nftables on the host as a second line of defense. (Similar to their managed DB services).
Vultr has a 5 VPC limit, no peering between subnets. This means that all our servers would essentially sit in the same prod subnet where if one is compromised, they can see all the other hosts.
Since each server is exposed on the public Internet essentially, does it matter they all exist in the same private space as well?
I could keep the monitoring on a separate VPC but then I’m still exposing my endpoints over the internet to pull metrics.
Im looking for some feedback and suggestions, maybe best practices. Without going to AWS/Azure, I’m very limited in locking things down it seems.
[link] [comments]