Decide the fate of the project: Winnie cloud - cloud hosting hosting
I have already told you that I visited Democamp 2010 in Poland and met many owners of promising Polish startups.
Polish guys, the creators of Winnie Cloud , asked to find out whether their startup would be in demand in Russia. And I hope you will help me in the comments to provide an overall picture of what is happening in this area.
')
The main idea is a secure cloud hosting for Ruby on Rails.
It is worth starting with the fact that Winnie Cloud was originally a closed cloud, created to support applications for their own clients. But because of the uniqueness of the service and the confidence that the service will be in demand, it was decided to make the hosting publicly available.
The whole architecture is illustrated in the diagram:
But the main "chip" of hosting is increased attention to the security of application data. Each application is isolated in its virtual environment, has its own network and database. This solution protects against an attacker's access to data. Below we consider all aspects of security in a little more detail.
There is only one moment when traffic from various applications passes through a common channel: the HTTP interface. All other parts of the system are secure and isolated for data security.
In collaborative environments, there are many ways to intercept traffic. Winnie Cloud focuses on all aspects of hosting and improving their security.
When working in virtual environments, there is the same problem as in normal - on one server, one process has many possibilities to influence other processes. There is a possibility of interrupting the process and even obtaining administrator rights on the server. So far, the only way to secure an application is to place it in an isolated environment (virtual machine).
For each application, Winnie Cloud allocates a separate virtual machine so that it cannot gain access to the processes of others.
Even the most optimized database servers can be inefficient due to non-optimized queries that retrieve millions of records from several tables at the same time.
Vulnerabilities on database servers are quickly fixed, but even then there is a tiny chance of getting data from other applications.
In Winnie Cloud, each application gets its own database server to avoid data loss and performance.
There is one more thing that an application can do in its virtual machine. Obtaining administrator rights, it can intercept all traffic on the network to which it is connected.
Winnie Cloud uses IPsec to provide only the necessary and secure connections between all nodes on the network. Thus, the only thing that can be intercepted by an attacker is his own traffic.
Winnie Cloud gives each application its own HTTP cache and full control over its content. Due to cache directives that can be changed manually, the possibility of damage to the cache of another application is excluded.
I turned to Evil Martians on the prospects of this startup:
Also, according to Martians, Scalaxi is an interesting option for Russia. They have reasonable prices and servers in Russia with a good channel. Scalaxie, on the other hand, is not a service for Ruby, but rather follows the Amazon model, providing scalable servers with root access.
I urge in the comments to deceive, whether a service such as Winnie Cloud is needed in Russia.
PS At the same time we will check hosting on Habraeffekt =)
Polish guys, the creators of Winnie Cloud , asked to find out whether their startup would be in demand in Russia. And I hope you will help me in the comments to provide an overall picture of what is happening in this area.
')
The main idea is a secure cloud hosting for Ruby on Rails.
It is worth starting with the fact that Winnie Cloud was originally a closed cloud, created to support applications for their own clients. But because of the uniqueness of the service and the confidence that the service will be in demand, it was decided to make the hosting publicly available.
The whole architecture is illustrated in the diagram:
But the main "chip" of hosting is increased attention to the security of application data. Each application is isolated in its virtual environment, has its own network and database. This solution protects against an attacker's access to data. Below we consider all aspects of security in a little more detail.
Security architecture
There is only one moment when traffic from various applications passes through a common channel: the HTTP interface. All other parts of the system are secure and isolated for data security.
In collaborative environments, there are many ways to intercept traffic. Winnie Cloud focuses on all aspects of hosting and improving their security.
Independent virtual servers
When working in virtual environments, there is the same problem as in normal - on one server, one process has many possibilities to influence other processes. There is a possibility of interrupting the process and even obtaining administrator rights on the server. So far, the only way to secure an application is to place it in an isolated environment (virtual machine).
For each application, Winnie Cloud allocates a separate virtual machine so that it cannot gain access to the processes of others.
Separate database servers
Even the most optimized database servers can be inefficient due to non-optimized queries that retrieve millions of records from several tables at the same time.
Vulnerabilities on database servers are quickly fixed, but even then there is a tiny chance of getting data from other applications.
In Winnie Cloud, each application gets its own database server to avoid data loss and performance.
Separate network
There is one more thing that an application can do in its virtual machine. Obtaining administrator rights, it can intercept all traffic on the network to which it is connected.
Winnie Cloud uses IPsec to provide only the necessary and secure connections between all nodes on the network. Thus, the only thing that can be intercepted by an attacker is his own traffic.
Separate cache
Winnie Cloud gives each application its own HTTP cache and full control over its content. Due to cache directives that can be changed manually, the possibility of damage to the cache of another application is excluded.
Expert opinion
I turned to Evil Martians on the prospects of this startup:
Judging by the description on the site Winnie Cloud , the guys are very close in technology to Heroku . Technologically, this is very interesting, since their model gives less headache when it is delayed. Also, in comparison with the same Heroku or RackSpace Cloud Servers , accommodation in Europe is a significant advantage in the fight for a place under the sun. Of the obvious disadvantages worth answering:
- Quite high prices compared to other cloud hosting ( Heroku, RackSpace, Oversan, comparable to AWS );
- The choice of hosting is like the choice of a bank: first of all, complete confidence in the structure and service is needed, and secondly, opportunities; there is strong competition from both Heroku and RackSpace Cloud Servers for “fame”;
- Less features than Heroku with the same architecture.
Also, according to Martians, Scalaxi is an interesting option for Russia. They have reasonable prices and servers in Russia with a good channel. Scalaxie, on the other hand, is not a service for Ruby, but rather follows the Amazon model, providing scalable servers with root access.
I urge in the comments to deceive, whether a service such as Winnie Cloud is needed in Russia.
PS At the same time we will check hosting on Habraeffekt =)
Source: https://habr.com/ru/post/109434/
All Articles