Extra capabilities¶
Need extra connectivity, extra disk space, edge protection or a dedicated mail service? We can help you.
VPN tunnel¶
The hosting infrastructure can also be connected to the client's managed network or services via an IPSec VPN tunnel (normal or redundant/HA mode).
This may be necessary to exchange data with existing external services that are currently not provided to be opened directly over public internet. These tunnels are directly connected to the Platform network set up for the client so that data can be exchanged in a secure and efficient way.
What the tunnel includes:
- A traffic allowance of 100 GB per month
- An uptime guarantee of 99.9% on the tunnel
- 24/7 support
A high availability setup, bringing the uptime guarantee to 99.99%, is available on request. Ask your Dropsolid contact person.
Mail service¶
If you require a more advanced setup with DKIM and DMARC authentication and validation or need to send larger volumes, but don't want to configure and maintain it yourself, then then dedicated mail service of the Dropsolid Experience Platform can help you.
This service provides:
- Fully managed and maintained by Dropsolid
- Dedicated IP address only used for your application(s) and domain(s)
- DKIM and DMARC validation of the domain names of your application
- 30 days retention of mail logs
- Access to those logs
The service comes in three volumes: up to 10,000, up to 50,000 or up to 100,000 mails per month. If you go past the volume you contracted, mails keep going out, and the extra mails are simply invoiced per mail. Setting the service up is configuration work on our side, and it is repeated whenever domains are added later.
For the difference between the general mail service and the dedicated one, see How can I have more control over the delivery of mails sent from applications on Dropsolid Experience Platform.
Extra disk space¶
Disk space can be extended in blocks of 50 GB. Each block covers three things at once:
- 50 GB of project space
- 50 GB of instant recoverable backup space
- 50 GB of long-term backup storage
Downgrading again later is possible, but it means migrating the disk. That migration needs downtime for the duration of the file transfer, roughly 1.5 hours per 50 GB being moved, and it is manual work that is charged as a change.
Edge protection: CDN, DDoS and WAF¶
Edge caching, DDoS protection and a managed Web Application Firewall are delivered by Dropsolid Edge Shield, a separate managed service that sits in front of your platform and screens and accelerates traffic before it reaches your application.
The edge caching layer keeps your pages close to your visitors, supports tag based invalidation that is fully compatible with Drupal, and shields your origin during traffic spikes through request collapsing. The managed Web Application Firewall detects and mitigates advanced Layer 7 attacks, and bot management separates real visitors and trusted crawlers from malicious automation. Dropsolid designs, tunes and operates all of it for you. Ask your Dropsolid contact person for details.
Redundancy¶
Within our Professional tier, we foresee the option1 to host your application in a fully redundant way.
This means that there are at least 2 underlying components for each component (2 proxy servers, 2 web servers, ...).
Specifically, this means that no physical or logical component of the proposed solution should be a single point of failure.
These components of a component are also located in different zones ( = a separate data center, e.g. server 1 is in zone A, server 2 is in zone B) so a complete zone is allowed to fail without complete downtime (though possibly a load impact and slower application). This way, we can avoid the website being unavailable for a long time due to a technical failure, cyber attack, ...
In addition, this also entails the following features:
- A higher SLA can be offered on the infrastructure and application.
- planned maintenance at infrastructure level can almost always take place without complete downtime of the application.
- temporary scaling up or down of the infrastructure can therefore take place without complete application downtime.
Footnotes¶
- This is the default mode in our Enterprise tier.