On security, I want to be clear here about this. I understand people like to play fast and loose with these things, but when setting up a server configuration, you should always 'assume' the data is important and needs to be secure. Even if you know for a fact that it isn't.
Why say it this way. Well a developer could change this situation very easily. Even if the data is not important today. Some day down the road a developer could alter a table and start inserting credit card info or other critical data. The developer may not realize or be on the same page as the sys admin that set up the server. Now you have a problem. On system resources, the same holds true. You can easily run MySQL on a low traffic web server, but things can change very easily. It's best the plan for the worse. It'll save you a lot of headaches down the road. John [EMAIL PROTECTED] -----Original Message----- From: Mike Chabot [mailto:[EMAIL PROTECTED] Sent: Thursday, June 21, 2007 10:22 AM To: CF-Talk Subject: Re: CF8 Ent Instances Assuming the data is important and needs to be secure, then you are correct. However, not all data is important. The server these guys were describing was unlikely to have anything remotely sensitive on it, which is why they were comfortable running everything on one box. I should have clarified that. Their point was they ran a site with heavy traffic and didn't see their server get bogged down due to the database use, like many SQL Server sites experience, because MySQL uses fewer system resources than SQL Server. They were also running PHP on Unix. -Mike Chabot On 6/21/07, Cutter (CFRelated) <[EMAIL PROTECTED]> wrote: > It may chew up less resources, but that doesn't get around the > security issues. Every 'expert' I've ever spoken with on this would > agree with putting the db on a separate box, behind the firewall, and > without direct access to the net, utilizing full authenticated-only > access from specific sources within the internal lan, and typically on > a non-standard port. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| ColdFusion 8 beta â Build next generation applications today. Free beta download on Labs http://www.adobe.com/cfusion/entitlement/index.cfm?e=labs_adobecf8_beta Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:281790 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4
