Actions for MongoDB topology design : scalability, security, and compliance on a global scale

Email RIS file
Bookmark
Report an Issue

MongoDB topology design : scalability, security, and compliance on a global scale / Nicholas Cottrell

Author
Cottrell, Nicholas
Published
[California] : Apress, [2020]
Physical Description
1 online resource
Access Online

Availability

I Want It
I Want It

Finding items...

Contents
Intro -- Table of Contents -- About the Author -- About the Technical Reviewer -- Acknowledgments -- Chapter 1: Core Concepts -- Key features of MongoDB -- Differences to "traditional databases" -- Terminology -- Storage engines -- Binary JSON -- Data files -- Concurrency -- Relationships -- Referential integrity -- ACID compliance -- Atomicity -- Consistency -- Isolation -- Bulk operations -- Durability -- Journal and flushing -- Scaling -- Replication -- Syncing -- Elections -- Lag/staleness -- Oplog window -- Read preference -- States -- Sharding -- Chunks -- Choice of shard key, Balancer -- Shard distribution -- Pre-splitting -- Ascending shard keys and hot shards -- Architecture choices -- Computing resources -- Memory -- Storage -- Bandwidth and latency -- Horizontal scaling -- Round-trip latency -- Private vs. cloud -- Logical databases -- Key takeaways -- Chapter 2: Fault-Tolerant Design -- Special nodes -- Arbiters -- Hidden secondary -- Delayed secondary -- Partial restores -- Nonvoting secondary -- Avoiding failure -- Points of failure -- Reserve capacity -- Automatic failover -- Designing for flexibility -- DNS not IP -- Auto-discovery -- Planned downtime, Multiple routers -- Rolling maintenance -- Clean step-down -- Tooling failover -- Failure scenarios -- Network partition -- Hardware failure -- Remote DC failure -- Storage volume failure -- Network degradation -- Shared VM hosts -- Shared storage area network -- Unbalanced hardware -- Key takeaways -- Chapter 3: Security -- Local access -- Network hardening -- Firewalls with iptables -- Limit interfaces with bindIp -- Customize ports -- Filesystem -- Authentication -- Passwords vs. keyfiles -- Connecting with passwords -- Keyfiles -- x.509 certificates -- Client authentication, External authentication -- Encrypted connections -- TLS 1.2 -- Encryption at rest -- Backups -- Auditing, obfuscation of logs -- Proactive security -- Server-side JavaScript -- Input validation and injection attacks -- where operator -- SELinux -- Binary monitoring -- Certification -- Checklist -- Chapter 4: Compliance and GDPR -- General Data Protection Regulation -- Privacy by design -- Caveats -- Data protection -- Key concepts -- Personally identifiable information -- Definitions -- Representatives -- Data portability -- Data size -- Retention of personal data -- Automatic removal, and Custom redaction -- Right to be forgotten -- Product guarantees -- Avoid dated collections -- Data flows -- Processing data -- End-to-end data encryption -- Data storage -- Data mapping -- Auditing changes -- Validation -- Pseudonymization -- Generalizing data -- Encryption at rest -- Backups -- Regulations around the world -- US healthcare -- California -- India -- Canada -- China -- Russia -- Design recommendations -- Field-level encryption -- Views -- Separate permissions -- Data leaks -- Sharding -- Logging -- Minimize vulnerabilities -- Summary -- Chapter 5: Basic Topologies -- Introduction
Summary
Create a world-class MongoDB cluster that is scalable, reliable, and secure. Comply with mission-critical regulatory regimes such as the European Unions General Data Protection Regulation (GDPR). Whether you are thinking of migrating to MongoDB or need to meet legal requirements for an existing self-managed cluster, this book has you covered. It begins with the basics of replication and sharding, and quickly scales up to cover everything you need to know to control your data and keep it safe from unexpected data loss or downtime. This book covers best practices for stable MongoDB deployments. For example, a well-designed MongoDB cluster should have no single point of failure. The book covers common use cases when only one or two data centers are available. It goes into detail about creating geopolitical sharding configurations to cover the most stringent data protection regulation compliance. The book also covers different tools and approaches for automating and monitoring a cluster with Kubernetes, Docker, and popular cloud provider containers. You will: Get started with the basics of MongoDB clusters Protect and monitor a MongoDB deployment Deepen your expertise around replication and sharding Keep effective backups and plan ahead for disaster recovery Recognize and avoid problems that can occur in distributed databases Build optimal MongoDB deployments within hardware and data center limitations.
Subject(s)
ISBN
9781484258170 (electronic bk.)
1484258177 (electronic bk.)
1484258169
9781484258163
Note
Includes index.
View MARC record | catkey: 37455469