Server Architecture
Overview
Our server architecture is designed for optimal performance, security, and scalability to support the Cardano ecosystem. The infrastructure consists of physical, bare-metal servers deployed on-premises, ensuring complete control over hardware and security configurations.
Server Specifications
All servers in our infrastructure share the following hardware specifications:
- Processor: AMD Ryzen 7 5800H (8 Cores, 16 Threads)
- Memory: 48 GB RAM
- Storage:
- OS Drive: 512 GB NVMe SSD
- Data Drive: 1 TB SATA SSD
- Operating System: Ubuntu 22.04 LTS
Network Topology
The servers are connected through a simple flat network within the local subnet 192.168.20.0/24. This configuration simplifies network management and reduces latency between servers.
- Subnet: 192.168.20.0/24
- Network Type: Flat network (single VLAN)
- Communication Protocols: TLS for secure communication between servers
Security Measures
Security is a paramount concern in our architecture. We employ the following measures:
- Firewall Configuration: Each server is protected by a firewall that allows only necessary traffic and blocks unauthorized access.
- Secure Communication: All inter-server communication is secured using TLS encryption.
- Access Control: SSH access is restricted to authorized personnel using key-based authentication.
Components Interaction
The infrastructure includes the following components:
- Cardano Node Servers: Act as relays and block producers in the Cardano network.
- Midnight Node Server: Dedicated to handling secure and private transactions.
- Partner-Chain-Dependencies Server: Hosts essential services like PostgreSQL, Kupo, and Ogmios.
These components interact over the secure local network, ensuring efficient communication and data synchronization while maintaining high security standards.
Additional Services
- Monitoring and Logging: [Details about monitoring tools and logging mechanisms]
- Backup Solutions: [Information on backup strategies and storage solutions]
- Disaster Recovery: [Plans for disaster recovery and business continuity]