10 best practices to configure your VPC
The release of this new product is a great opportunity to review the best practices for VPC configuration. Let's dive into some great tips to ensure you get the most out of your VPC.
Q3 Product updates and launches
Elevate your Cloud experience with our latest offerings
Summer has set, but our innovations are on the rise.
Dive into our Q3 2023 launches and discover the future of cloud, tailored for you. From expansive Availability Zones to cutting-edge database solutions, we're setting new standards in cloud reliability, scalability, and security.
Are you ready to transform your cloud journey?
👇 Dive in now!
Want to know more?
We host a dedicated webinar session with our experts.
Q3 products summary
| Product | Stage | Documentation | Console availability |
|---|---|---|---|
| AMS-3 AZ | General Availability | Get started with Instances | Yes |
| WAW-3 AZ | General Availability | Get started with Instances | Yes |
| VPC Multi-AZ | General Availability | How to benefit from VPC Multi-AZ? | Yes |
| Production-Optimized Managed Database SQL | General Availability | How to create a Managed Database? | Yes |
| Private Load Balancer | General Availability | Quickstart to Load Balancer | Yes |
| Serverless SQL database | Private Beta | How to get started with Serverless SQL Database? | Yes |
| API Gateway | Private Beta | How to deploy an API Gateway? | No |
Q3 features summary
| Feature | Stage | Documentation | Console availability |
|---|---|---|---|
| Kapsule, Secret Manager and Object Storage metrics available in Cockpit | General Availability | Activate your Cockpit | Yes |
| Kapsule Dedicated Control Plane Self-Serve option | General Availability | Discover the Control Plan offer | Yes |
| Managed Database SQL - Multi-AZ Read Replica | General Availability | Create a Read Replica | Yes |
| Serverless Trigger for Containers | Public Beta | Add a trigger to container | Yes |
Find the solution that's made for you
Reliable infrastructure
Optimize your deployment strategy for unparalleled uptime and resilience
- Initialize AMS1 Setup: Begin with a POP2 Managed Databases MySQL in AMS1. While it sets up, prepare a Public Gateway, VPC, and Private Network.
- Deploy WordPress on AMS1: Start a POP2 Instance without a Flexible IP and use a script to launch WordPress. Connect the Instance to the Private Network.
- Load Balancer integration: Establish a Load Balancer in AMS1 (without backends initially) and integrate it with the Private Network.
- WordPress-database link: On the Managed Database MySQL node, set up a “wordpress” database. Configure WordPress to access this database.
- Snapshot & AMS3 replication: Capture a snapshot of the AMS1 Instance volume, store it, and then import it to AMS3. Launch a new POP2 instance in AMS3 from this snapshot and connect it to the Private Network.
- Load Balancer finalization: Set up backends on the Load Balancer to link with both AMS1 and AMS3 instances. Adjust WordPress settings to use the Load Balancer’s IP.
- Backup and Multi-AZ Replica: Backup the WordPress database using Multi-AZ Object Storage. For demonstration, create a Multi-AZ read replica linked to the Private Network.
Scalable workloads
Adapt effortlessly to varying demands, ensuring peak performance under any load.
- Create your Kapsule cluster via Terraform
- Configure horizontal pod autoscaler and cluster autoscaler
- Open Cockpit to monitor Kapsule
- Set Alerts and configure Function to automate event
- CPU consumption increase and reach Control plane limits
- Migration is triggered by the alert
- Dedicated Control Plane set and status is up and running
Secure environment
Fortify your systems with best-in-class security measures, balancing accessibility with protection.
Initial situation
- 2 POP2 Instances and 1 DEV Instance publicly accessible through HTTP and SSH
- 1 SSH key use to handle login
- Scaleway Domain to handle DNS aspects
Scenario
- Create a VPC, assign the range of private IP addresses, and detach the public IPs.
- Create a Public Gateway with a Bastion, to give access to developer teams.
- Manage IAM rights, give the right rights to the right people, and ensure continuity
- Start Secret Manager to manage passwords, API keys, and connection tokens.
A picture's worth a thousand words
Want to know more about Scaleway?
Food for thought
2 reasons to upgrade your Kubernetes right now!
Kubernetes 1.28, code-named 'Planternetes’, is the latest minor release of the popular container orchestration platform. This article will focus on 2 enhancements that caught our eye.
Encryption at rest for Instances
Ensuring the security of sensitive information is a top priority for any organization, particularly when it involves storing data on a server. In this regard, implementing encryption at rest for partitions containing application data can serve as a highly effective solution to safeguard valuable data against both external threats and internal breaches.