Introduction
Caching
Caching is essential for the scalability of a dynamic website. Depending on the complexity of the site, it becomes increasingly difficult to provide good performance for requests that are handled by PHP. In general, there are orders of magnitude of difference between the latency of a response that comes from the cache and one that comes from the backend. Moreover, a caching mechanism can be necessary to mitigate denial of service attacks.
The Web Accelerator combines Varnish configuration modules developed and refined over years of experience with the necessary customizations for the customer's site to achieve maximum efficiency. It is a service fully managed by Seeweb staff, with no need for the customer to configure it himself.
Web Application Firewall
The Web Accelerator platform can act as a frontend cache, Web Application Firewall (WAF), or both at the same time.
The WAF uses a set of proprietary rules created by Seeweb staff to block the most common intrusion attempts.
Adopting a WAF is often a regulatory requirement, but our staff can also implement targeted configurations to protect sites with known security issues that cannot be updated.
All the functions described here are applicable to both services.
It is possible to enable one of the two services and then enable the other function later on the same appliance.
Supported Sites
A Web Accelerator can manage an arbitrary number of sites, as long as they all use the same CMS. Configurations are already available for the most popular CMS, otherwise Seeweb staff will develop a customized configuration with no additional costs.
To activate new sites, it is sufficient to contact our staff, so they can prepare the necessary TLS certificates.
Service Activation
At the time of purchase, it is necessary to indicate which sites on which server will be managed by the new Web Accelerator.
Our staff will then examine the behaviour of the sites to be managed and customize accordingly the Web Accelerator configuration.
Once the activation is complete, our staff will notify the IP of the new appliance to the customer to allow them to verify its correct operation for their sites.
Once the functional testing is complete, the customer will change the site's IP to point to the Web Accelerator: it is important to remember that before this step the service has been delivered, but it is not yet active.
Web Accelerator Technology
-
Caching: Varnish.
-
TLS termination: nginx.
-
WAF: ModSecurity with proprietary rules.
-
Configuration engine: YAML, Perl, Template::Toolkit, Moose, Moo.
-
Observability: Munin, Prometheus.
-
Real-time statistics: goaccess.
-
Operating system: Debian.
-
Infrastructure: Seeweb Cloud Servers.