[Info-vax] How would you load balance excess webserver traffic between multiple OpenVMS servers?

[Simon Clubley]

On 2021-01-11, Phillip Helbig (undress to reply) <helbig at asclothestro.multivax.de> wrote:
> In article <rti7e3$6ik$1 at dont-email.me>, Stephen Hoffman
><seaohveh at hoffmanlabs.invalid> writes: 
>
>> And I'd discourage the use of DECnet in any new configuration 
>> generally, as DECnet links are unencrypted and unauthenticated.
>
> Of course, but presumably here the machines with the Rdb database would 
> be connected to the webservers via a dedicated connection, i.e. no way 
> to get to them unless you get to the machines they're connected to, in 
> which case you've probably lost anyway.
>

It's called defence in depth Phillip.

The idea is that if one part of your network gets compromised you want
to try and keep attackers isolated to that one part of your network.

IOW, just because one part of your network gets compromised, it doesn't
have to mean that the whole network gets compromised provided you have
designed things in that way. That means no unencrypted communications
on your internal networks however as attackers could use that to drill
deeper into the rest of your network.

Simon.

-- 
Simon Clubley, clubley at remove_me.eisner.decus.org-Earth.UFP
Walking destinations on a map are further away than they appear.