Web API and Web Server

Right now we have your API and Web Server on two different boxes.  What I would like to know is if there is any reason that we cannot have them both on the same server?

Parents
  • In a word, security. Having them on separate machines allows you to lock down the API server more than would be convenient for a public-facing web server. For example, we have our firewall configured so that only our web servers are allowed to connect to the API server, and only on the ports required for that. This makes it much, much more difficult for anyone to attack the API server.

    -Morgan

Reply
  • In a word, security. Having them on separate machines allows you to lock down the API server more than would be convenient for a public-facing web server. For example, we have our firewall configured so that only our web servers are allowed to connect to the API server, and only on the ports required for that. This makes it much, much more difficult for anyone to attack the API server.

    -Morgan

Children