./configure --prefix=/etc/nginx \ --sbin-path=/usr/sbin/nginx \ --conf-path=/etc/nginx/nginx.conf \ --error-log-path=/var/log/nginx/error.log \ --pid-path=/var/run/nginx.pid \ --lock-path=/var/lock/nginx.lock \ --user=www-data \ --group=www-data \ --http-log-path=/var/log/nginx/access.log \ --http-client-body-temp-path=/var/lib/nginx/body \ --http-proxy-temp-path=/var/lib/nginx/proxy \ --http-fastcgi-temp-path=/var/lib/nginx/fastcgi \ --with-cc-opt="-O2 -fno-strict-aliasing" \ --with-http_gzip_static_module \ --with-http_ssl_module \ --with-http_geoip_module]]>
Q: If we deploy it on somebody else infrastructure, we basically gave them away code with a lot of work behind.
A: This statement is only partially correct. Yes, member of the staff will theoretically be able to access running virtual appliance from host server, yes, he theoretically can dump memory, then retrieve encryption keys and then debug your code into working algorithm. But, if you application so “interesting”, I bet you already have very secure storage - switched off computer and secure safe in some vault (and you work in finance, MOD HQ, MI5 or MI6 etc.), because if you are not, you are making this up and everything else you are doing potentially less secure then submitting job in the cloud.
Q: Well, in this sense my home server is more secure in then the cloud.
A: When defending some data against malicious access, the only question matter “How much it costs?” see this comic for a simple example. It is race about how much you are ready to spend and how much your competitor will spend in order to get your data. Depending on security of your house, it may cost hundred of pounds/dollars to get your server (physically). Compare it to hacking into amazon cloud architecture or bribing their sysadmin (which one? in what zone?). I bet odds are not in favour of the home server. I am really against home server as home server doesn’t have scalability and have a high latency, which will be crucial for your users.
Q: Well, if my home server will be stolen, there will be a trace like physical intrusion and then insurance can pay the damage.
A: Patent your algorithm or application. Provisional patent will cost around 250 pounds (100$ for US) and will protect you for a year. This have a big advantage as you can talk about your application loudly, which may attract investors.
Amazon Elastic cloud pros:
I believe if you are paranoid about your application, you can encrypt some part of the virtual machine which contains protected application (cryptfs etc.), and then setup key server with rotating keys which will be used to decrypt “especially secret” part of the code during runtime. Of cause all configuration is secure as long as your key distribution server is secure (somewhere in Switzerland, under nuclear station, you know the drill), thus I think patenting is a better option. The bottom line is that you have product and your customers, or you don’t. Great application, sitting on switched off computer with hard drive doesn’t make any money. Cloud computing is a very cheap way to create great scalable architecture and compared to alternatives - home server, co-location, your own laptop, is no less secure.
]]>[mysqld]
character-set-server=utf8
default-collation=utf8_unicode_ci
character_set_client=utf8
[mysql]
default-character-set=utf8
Grab EC2 spot instance price:
ec2-describe-spot-price-history -t c1.medium -d Linux/UNIX | perl -ane 'print "$F[2],$F[1]\n"'>>data_ec2.txt
ec2-describe-spot-price-history --region eu-west-1 -t c1.medium -d Linux/UNIX | perl -ane 'print "$F[2],$F[1]\n"'>>data_ec2_eu.txt3. You also need to use two files time-plot.js and html file