{"id":53261,"date":"2019-11-27T00:00:00","date_gmt":"2019-11-26T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/chto-ostanetsya-v-servernoj"},"modified":"2020-02-18T14:01:09","modified_gmt":"2020-02-18T11:01:09","slug":"chto-ostanetsya-v-servernoj","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/chto-ostanetsya-v-servernoj","title":{"rendered":"What will remain in the server?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"What<\/p>\n

<\/p>\n

Many organizations use cloud services or move equipment to
\ndata centers. What makes sense to keep in the server room and how should the perimeter protection of the office network be organized in such a situation?<\/em><\/p>\n

<\/a><\/noindex><\/p>\n

Once everything was on the server<\/h2>\n

<\/p>\n

At the beginning of the runet's development, most companies addressed the IT infrastructure issue roughly the same way: a room was allocated where an air conditioner was installed and where almost all networking and server equipment was concentrated.<\/p>\n

<\/p>\n

The system administrator configured one or more servers on FreeBSD, Linux, or OpenSolaris, etc. And then necessary services were launched on this 'household': from a web server and corporate email to a file-sharing service.<\/p>\n

<\/p>\n

As a company grows and develops, it inevitably encounters a situation where the server room no longer meets requirements. If there is money, one can build a dedicated data center. It might be more economical to rent racks in commercial data centers. Quality power supply based on DRUPS, industrial air conditioning systems, a full staff of specialized experts\u2014these things are unlikely to be available in the case of an office server room.<\/p>\n

<\/p>\n

Following the large businesses, the mindset of the management in medium and small companies is gradually shifting from the mentality of 'I carry everything with me' and 'my house is my fortress' to 'outsource and relieve myself of the burden.'<\/p>\n

<\/p>\n

For small businesses, such 'outsourcing' options have become cloud providers. Previously, for a company of 40 people, having its own mail server was something taken for granted, but today, services from providers like Google are attracting all those who previously couldn't imagine working without their own Sendmail or Postfix.<\/p>\n

<\/p>\n

Virtual systems have greatly assisted in such 'relocations.' If before their arrival, one had to move the entire physical server or configure everything on new hardware, now it is enough to transfer the virtual machine image.<\/p>\n

<\/p>\n

What will remain in that small room with the air conditioner?<\/h2>\n

<\/p>\n

First and foremost, this refers to networking equipment, both active and passive. Often, what is referred to as a 'data center' includes cross-connects with leftover networking equipment. Such cases do not require a special room with a powerful cooling system, electrical supply, and so on.<\/p>\n

<\/p>\n

The second group of equipment that is still difficult to remove from the data center is security gateways.
\nsecurity gateways.<\/p>\n

<\/p>\n

But what are these gateways? As mentioned above, if not long ago a system administrator had one or several servers at their disposal where they could deploy whatever they wished, this luxury may no longer be available.<\/p>\n

<\/p>\n

However, the need for protection against external threats has not disappeared. It is possible, of course, to move all services and necessary equipment entirely to a data center and route traffic through such a gateway to the office cross-connect over a secure channel, for example, via VPN.
\nAt first glance, this scheme looks appealing, if it weren't for the increased load on existing channels. If there is no desire to pay for a more 'robust' channel, this is not quite what is needed.<\/p>\n

<\/p>\n

Another option is to purchase a specialized device for traffic protection, the architecture of which, due to its narrow focus, allows avoiding powerful, energy-intensive, and heat-generating components.<\/p>\n

<\/p>\n

A 'zoo' will not be necessary.<\/h2>\n

<\/p>\n

In the absence of a classic data center, it is much better to obtain several services 'in one box' rather than spreading a 'zoo' in a small room, or even within a small cross-connect cabinet. The solution should be economical, proven, and have adequate support in Russian. <\/p>\n

<\/p>\n

Note: We are currently discussing very small, medium, and larger offices. Large companies constructing their own data centers are not considered for now \u2014 it is 'impossible to cover everything' in one article.<\/em><\/p>\n

<\/p>\n

And for every case, Zyxel already has a solution within one product line. In short, a 'zoo' will not be necessary.<\/p>\n

<\/p>\n

ZyWALL ATP Security Gateways<\/h2>\n

<\/p>\n

Earlier, we already discussed the operational principles of such devices using the example of ZyWALL ATP200<\/a><\/noindex>Their main feature lies in the combination of a firewall with the Zyxel Cloud security service. This division of responsibilities allows ZyWALL ATP to address a wide range of perimeter protection issues without requiring additional hardware resources.<\/p>\n

<\/p>\n

The list of protection features is quite extensive (see Table 1), including SecuReporter analytics tools and Sandboxing\u2014a 'sandbox' for the preliminary analysis of downloaded content.<\/p>\n

<\/p>\n

It's worth emphasizing again that in this case we are simply migrating services from the local office to the cloud. Everything else is managed by Zyxel Cloud in an anonymous mode. In addition to convenience, this approach provides effective protection against zero-day threats thanks to machine learning and information sharing among ATP gateways worldwide. A whole neural network has been built for protection.<\/p>\n

<\/p>\n

Quote<\/a><\/noindex>: «When an unknown file is detected, Cloud Query quickly (within a couple of seconds) checks its hash against the cloud database and determines whether it is dangerous or not. This service requires minimal network resources, so it does not impact device performance. The effectiveness of threat protection is ensured by using a constantly updated cloud database containing data on billions of threats. Cloud Query also accelerates the operation of the intelligent features for detecting new threats in Zyxel Security Cloud, enhancing the malware protection of each ATP firewall.»<\/p>\n

<\/p>\n

\"What<\/p>\n

<\/p>\n

Table 1. Technical specifications of the ZyWALL ATP series<\/em>.<\/p>\n

<\/p>\n

Notes:<\/em><\/strong><\/p>\n

<\/p>\n

(1) Actual performance largely depends on the state of the network and active applications.<\/em><\/p>\n

<\/p>\n

(2) Maximum throughput is based on RFC 2544 (1,518-byte UDP packets).<\/em><\/p>\n

<\/p>\n

(3) Measured VPN throughput is based on RFC 2544 (1,424-byte UDP packets).<\/em><\/p>\n

<\/p>\n

(4) AV and IDP throughput metrics use industry-standard HTTP performance test (1,460-byte HTTP packets). Testing was carried out in a multithreaded mode.<\/em><\/p>\n

<\/p>\n

(5) The maximum number of sessions was measured using industry-standard tools\u2014IXIA IxLoad testing tool.<\/em><\/p>\n

<\/p>\n

(6) Connection speed test results with 1Gbps WAN were conducted under real conditions and may vary slightly depending on the quality of the channel.<\/em><\/p>\n

<\/p>\n

(7): After the Gold Pack expires, only 2 APs will be supported.<\/em><\/p>\n

<\/p>\n

(8): You can enable or extend features by purchasing additional licenses for Zyxel services.<\/em><\/p>\n

<\/p>\n

Pay attention to the supported VPN service set. Almost everything you need for communication with the headquarters or home office is already included in one package, so this device can be confidently recommended as an endpoint for branch connectivity and for supporting remote work.<\/p>\n

<\/p>\n

Solutions for Small Offices<\/h2>\n

<\/p>\n

Small offices can be conditionally divided into two groups: independent enterprises and branches of larger companies.<\/p>\n

<\/p>\n

Independent businesses are newly established companies and those destined to remain small. For example, design firms, architectural studios, editorial offices of small media outlets, and so on. These business units often utilize cloud services, at least email and file sharing.<\/p>\n

<\/p>\n

Branches of larger organizations primarily need stable communication with the central office. Everything else is located at 'the Center.'<\/p>\n

<\/p>\n

Such 'little ones' often need a simple interface for management. A network administrator from headquarters often doesn\u2019t have the ability to quickly rush to distant locations to resolve issues at a new branch. Local small companies have no such opportunity at all. They have to resort to the services of a 'coming admin.' For such cases, management should follow the principle of 'the simpler, the more reliable.'
\nFor small offices, it makes sense to use ZyWALL ATP100 and ZyWALL ATP200 models.<\/p>\n

<\/p>\n

Network Gateway<\/p>\n

<\/p>\n

ATP100 was introduced relatively recently but has already gone on<\/a><\/noindex> sale The main difference from its older sibling (<\/a><\/noindex>.<\/p>\n

<\/p>\n

ATP200) is that it is designed for a lower load and does not have a 19-inch rack mount. Recommended for home offices, small companies, branches, and so on.<\/a><\/noindex>Figure 1. ZyWALL ATP100.<\/p>\n

<\/p>\n

\"What<\/p>\n

<\/p>\n

From the design features: both ATP100 and ATP200 are fanless models. This is beneficial because, firstly, there is no noise, and secondly, there is no need to replace the fan. In situations with a 'coming admin,' this is a significant advantage.<\/em><\/p>\n

<\/p>\n

Figure 2. ZyWALL ATP200.<\/p>\n

<\/p>\n

\"What<\/p>\n

<\/p>\n

The ATP200 model supports two WAN ports and can connect to two independent lines, for example, from different providers.<\/em><\/p>\n

<\/p>\n

The ATP200 model supports two WAN ports and can connect to two independent lines, such as from different providers. <\/p>\n

<\/p>\n

As mentioned above, the most important factor for a small office, after a stable power supply, is reliable connectivity. Unfortunately, local providers cannot always guarantee an outage-free service. It\u2019s necessary to explore backup options.<\/p>\n

<\/p>\n

IMPORTANT!<\/em><\/strong> In addition to the specialized WAN ports in the ATP models, there are USB ports that can connect USB modems for WAN use. This feature is available for all ATP models.<\/em><\/p>\n

<\/p>\n

If the device has an SFP port, it can also be used as WAN. This feature is available for all ATP models.<\/em> <\/p>\n

<\/p>\n

Here\u2019s a life hack from Zyxel.<\/em><\/p>\n

<\/p>\n

Medium-sized companies<\/h2>\n

<\/p>\n

For medium-sized companies, Zyxel offers a decent device \u2014 ZyWALL ATP500<\/a><\/noindex> <\/p>\n

<\/p>\n

This is a next-generation gateway with enhanced protection against evolving threats.<\/p>\n

<\/p>\n

Interesting features include:<\/p>\n

<\/p>\n

Seven configurable ports allow for flexible setup, for example, 2 WAN, 2 DMZ, and 3 LAN ports when connecting 3 separate VLANs for internal use. There is also 1 SFP port.<\/p>\n

<\/p>\n

\"What<\/p>\n

<\/p>\n

Figure 3. ZyWALL ATP500.<\/em><\/p>\n

<\/p>\n

There is a possibility to operate in high availability cluster mode (Device HA Pro) with two ZyWALL ATP500s. If one is down, the other will still maintain connectivity.<\/p>\n

<\/p>\n

By fully utilizing the features of the ATP500, one can achieve flexible,
\nhigh-reliability, secure connectivity with the external world or a specific node, such as the
\nheadquarters.<\/p>\n

<\/p>\n

Larger offices<\/h2>\n

<\/p>\n

For them, the most powerful option in this series is recommended \u2014 ATP800.<\/p>\n

<\/p>\n

This model boasts a decent number of ports: 12 RJ-45 and 2 SFP, all of which can be configured in WAN, LAN, or DMZ mode, allowing for multiple WLANs, setting up several DMZs, and still providing external network access for a complex internal infrastructure. It is suitable for relatively large offices with developed networks and high security and access control requirements.<\/p>\n

<\/p>\n

\"What<\/p>\n

<\/p>\n

Figure 4. ZyWALL ATP800.<\/em><\/p>\n

<\/p>\n

It\u2019s also worth noting that this model is recommended with a view towards growth. If company expansion is anticipated, such as the development of a local chain of stores, it makes sense to invest in a more powerful model upfront to avoid spending twice.<\/p>\n

As we can see, even under the most spartan conditions, a good level of protection, fault tolerance, and flexibility can be ensured.<\/p>\n

Technical support, tips, discussions, news, promotions, and announcements \u2014 Join us <\/a><\/noindex> on Telegram! <\/p>\n

<\/p>\n

Useful links<\/h2>\n

<\/p>\n

    \n
  1. \n

    Colocation: How, Why, and What<\/a><\/noindex><\/p>\n

    \n<\/li>\n

  2. \n

    Have breakfast yourself, share the work with the 'cloud'<\/a><\/noindex><\/p>\n

    \n<\/li>\n

  3. \n

    ZyWALL ATP100 Security Gateway Page<\/a><\/noindex><\/p>\n

    \n<\/li>\n

  4. \n

    ZyWALL ATP200 Security Gateway Page<\/a><\/noindex><\/p>\n

    \n<\/li>\n

  5. \n

    ZyWALL ATP500 Security Gateway Page<\/a><\/noindex><\/p>\n

    \n<\/li>\n

  6. \n

    ZyWALL ATP800 Security Gateway Page<\/a><\/noindex><\/p>\n

    \n<\/li>\n

  7. \n

    Our service is both risky and challenging, or Zyxel ATP500<\/a><\/noindex><\/p>\n

    \n<\/li>\n<\/ol>\n

    Source: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0430\u044e\u0442 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 \u0426\u041e\u0414. \u0427\u0442\u043e \u0438\u043c\u0435\u0435\u0442 \u0441\u043c\u044b\u0441\u043b \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u0438 \u043a\u0430\u043a \u043b\u0443\u0447\u0448\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u0443 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430 \u043e\u0444\u0438\u0441\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0442\u0430\u043a\u043e\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438? \u041a\u043e\u0433\u0434\u0430-\u0442\u043e \u0432\u0441\u0451 \u0431\u044b\u043b\u043e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0420\u0443\u043d\u0435\u0442\u0430 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u0432\u043e\u043f\u0440\u043e\u0441 \u0441 \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0440\u0435\u0448\u0430\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043f\u043e \u043e\u0434\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u0435: \u0432\u044b\u0434\u0435\u043b\u044f\u043b\u043e\u0441\u044c \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0435, \u043a\u0443\u0434\u0430 \u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043a\u043e\u043d\u0434\u0438\u0446\u0438\u043e\u043d\u0435\u0440 \u0438 \u0433\u0434\u0435 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u0430\u0447\u0438\u0432\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0447\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-53261","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47What will remain in the server room? | ProHoster","description":"Many organizations use cloud services or.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/chto-ostanetsya-v-servernoj","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u043e\u0441\u0442\u0430\u043d\u0435\u0442\u0441\u044f \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439? | ProHoster","og:description":"\u041c\u043d\u043e\u0433\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438\u043b\u0438.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/chto-ostanetsya-v-servernoj","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-26T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53261","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 06:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:28:48","updated":"2026-08-11 12:50:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/53261","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=53261"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/53261\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=53261"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=53261"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=53261"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}