Infrastructure security

This chapter discusses how to protect servers and other infrastructure needed to run the service.

Infrastructure here covers everything that runs your Internet service. It is territory for system administrators, who are aware of integration and deployment details. Everything cannot be done in-house; one most likely needs to rely on third-party services for some things, and they should be accounted for, too.

• Two-factor authentication on infrastructure services
• Encrypted server data
• Security proxy
• Internal services not exposed
• Traffic throttle
• Log server
• Secure server-to-server connections
• Intrusion detection