Skip to main content
Information Security

Return to Question

fixed a lot of this and that, hopefully in acceptable manner
Source Link
TildalWave
TildalWave
  • 10.8k
  • 11
  • 47
  • 87

Seperating Separating Apache and MySQL over TORTor for security, preformanceperformance, and reliability

I have a few wuestions.

I'm trying to set up a hidden web service over the TORTor network, and I was thinking of making a configurationsconfiguration where my Apache server and my database server are located on different networks.

I know this will introduce a LOTlot of latency, especially since no server will know where the other is (Tor will be running on both), so that ifin case one of them is compromised, the other one is not.

Anyways, I'd like to know if it would be reasonable to run a hidden service configured as follows: My Apache server connectsconnecting to a seperateseparate hidden service that acts as a database. The, and the end user connects to the apacheApache server.?

My ultimate question is: WouldAdditionally, would the latency be low enough to make this feasible, or would it be impossilbeimpossible to use and it would time out-out all the time, due to netowrknetwork latency?

Also, what What would be an ideaideal server configureationconfiguration, i ntermsin terms of resources. Would? Would the apache server need more ramRAM/cpuCPU, and the DB server more IOI/O and things like that?

Seperating Apache and MySQL over TOR for security, preformance, and reliability

I have a few wuestions.

I'm trying to set up a hidden web service over the TOR network, and I was thinking of making a configurations where my Apache server and my database server are located on different networks.

I know this will introduce a LOT of latency, especially since no server will know where the other is (Tor will be running on both) so that if one is compromised, the other is not.

Anyways, I'd like to know if it would be reasonable to run a hidden service configured as follows: My Apache server connects to a seperate hidden service that acts as a database. The end user connects to the apache server.

My ultimate question is: Would the latency be low enough to make this feasible, or would it be impossilbe to use and time out all the time, due to netowrk latency?

Also, what would be an idea server configureation, i nterms of resources. Would the apache server need more ram/cpu, and the DB server more IO and things like that?

Separating Apache and MySQL over Tor for security, performance, and reliability

I'm trying to set up a hidden web service over the Tor network, and I was thinking of making a configuration where my Apache server and my database server are located on different networks.

I know this will introduce a lot of latency, especially since no server will know where the other is (Tor will be running on both), so that in case one of them is compromised, the other one is not.

I'd like to know if it would be reasonable to run a hidden service configured as Apache server connecting to a separate hidden service that acts as a database, and the end user connects to the Apache server?

Additionally, would the latency be low enough to make this feasible, or would it be impossible to use and it would time-out all the time, due to network latency? What would be an ideal server configuration, in terms of resources? Would the apache server need more RAM/CPU, and the DB server more I/O and things like that?

Source Link
user36603
user36603
  • 21
  • 1

Seperating Apache and MySQL over TOR for security, preformance, and reliability

I have a few wuestions.

I'm trying to set up a hidden web service over the TOR network, and I was thinking of making a configurations where my Apache server and my database server are located on different networks.

I know this will introduce a LOT of latency, especially since no server will know where the other is (Tor will be running on both) so that if one is compromised, the other is not.

Anyways, I'd like to know if it would be reasonable to run a hidden service configured as follows: My Apache server connects to a seperate hidden service that acts as a database. The end user connects to the apache server.

My ultimate question is: Would the latency be low enough to make this feasible, or would it be impossilbe to use and time out all the time, due to netowrk latency?

Also, what would be an idea server configureation, i nterms of resources. Would the apache server need more ram/cpu, and the DB server more IO and things like that?