Brightsource web hosting overview

Presented to National Trust on 2015-12-09

Transcript

1. Brightsource Raffle Hosting Overview of environment 11 December 2015
2. Data  is  encrypted  in  transit  with  TLS   Live  sites  hosted  in  Ireland   Backup  are  stored  in  Frankfurt   Amazon  vs.  Customer  responsibility   (shared  responsibility  model)    
4. Site  is  served  from  its  own  EC2  instance   Database  is  on  RDS  in  a  private  subnet  
5. Ubuntu  LTS  patched  with  security  updates     Each  client  (site)  is  on  its  own  instance     Nginx,  PHP5-­‐FPM  are  installed  -­‐  no  addiQonal  services  run  on  the  box     Port  80  and  443  are  exposed  by  Amazon  security  group,  all  other  ports   are  blocked  to  the  public  Internet.     Security  cerQficate  installaQon  uses  custom  Diffie-­‐Hellmen  and  receives   an  A+  raQng  on  ssllabs.com     SSH  login  restricted  to  Brightsource  network  and  is  by  cerQficate  only.       Fail2Ban  is  installed   CerQficate  is  not  shared  outside  of  our  team.