DEVOPS ASSIGNMENT
Availability
Zone A
Q1: [Security
Text Task] 17.0.1.0/24 17.0.2.0/24
Implement or explain the configurations to be
made so that only users connected to the VPN Application
servers are able to access the application server VPN INSTANCE
server
This is an AWS specific task Inetrnet
Router Gateway
Private Subnet
Public Subnet
SSL
Private Route Table VPN
NAT
Gateway
Remote User
VPC 17.0.0.0/16
Region
Application/Instance => Rsyslog => Logstash => Elasticsearch
S3 or Similar
app_foo File Storage Write LOGS Analyze &
Syslog Search
/logs/<file>
Server 1
Q2 [R&D Task] All Logs ELASTIC
SEARCH
FETCH LOGS
Create a system implementation as shown in the app_bar KIBANA
image with detailed components that allows me to Syslog
perform following tasks. /logs/<file>
Text Visualize
&
1. Collect logs from multiple applications Manage
Server 2
2. Send all the logs to a centralised server
Specific
3. The Centralised Log Server should be capable of aap_signal logs
filtering logs and sending to specific defined Syslog
locations like ELK, S3(file storage), etc /logs/<file>
Server 3 HA Proxy HA Proxy
Note: SINK has to replace a tool that can route
LOG 1 LOG 2
specific logs to ELK stack or a service
rsyslog
Log Stash
Log Stash