DEVOPS ASSIGNMENT

Availability
Zone A

Q1: [Security
Text Task] 17.0.1.0/24 17.0.2.0/24

Implement or explain the configurations to be

made so that only users connected to the VPN Application
servers are able to access the application server  VPN INSTANCE
server

This is an AWS specific task Inetrnet

Router Gateway

Private Subnet
Public Subnet

SSL
Private Route Table VPN
NAT
Gateway

Remote User

VPC 17.0.0.0/16

Region

Application/Instance => Rsyslog => Logstash => Elasticsearch

S3 or Similar
app_foo File Storage Write LOGS Analyze &
Syslog Search
 /logs/<file>
Server 1
Q2 [R&D Task] All Logs ELASTIC
SEARCH
FETCH LOGS
Create a system implementation as shown in the app_bar KIBANA
image with detailed components that allows me to Syslog
perform following tasks.  /logs/<file>
Text Visualize
&
1. Collect logs from multiple applications Manage
Server 2
2. Send all the logs to a centralised server
Specific
3. The Centralised Log Server should be capable of aap_signal logs
filtering logs and sending to specific defined Syslog
locations like ELK, S3(file storage), etc  /logs/<file>

Server 3 HA Proxy HA Proxy

Note: SINK has to replace a tool that can route

LOG 1 LOG 2
specific logs to ELK stack or a service
rsyslog
Log Stash
Log Stash