1.
{ nodestaaarrrarrrchitecture }<br />@nodester<br />@chrismatthieu<br />@WeAreFractal<br />@nodeAZ<br />

2.
{ nodester architecture }<br />@nodester<br />@chrismatthieu<br />@WeAreFractal<br />@nodeAZ<br />

3.
{ nodester stats }<br />Open source platform provides free node.js hosting<br />Started by @chrismatthieu<br />Currently hosting about 2,000 apps<br />Github: 280 watchers + 32 forks<br />Coupons requested: 10,000+<br />Coupons in the wild: 3,000+ <br />

4.
{ system specs }<br />Amazon EC2 Extra Large High Memory<br /><ul><li>17.1 GB memory

5.
6.5 ECU (2 virtual cores with 3.25 ECU each)

6.
420 GB storage

7.
64-bit platform</li></li></ul><li>{ main components }<br />

8.
{ implementation}<br />

9.
{ high level }<br />Handles all HTTP and Websocket requests without reverse proxy<br />proxy.js<br />Handles all REST API, CLI, and nodester.com traffic<br />2,000+ Node.JS apps!<br />apps<br />app.js<br />

10.

11.
Chroot & Unionfs<br />http://en.wikipedia.org/wiki/Chroot<br />http://en.wikipedia.org/wiki/UnionFS<br />

12.
{ roadmap }<br />

13.
{ replaced “forever” with upstart }<br />

14.
{ separate out features } and { reorganize system layout }<br />

15.
{ separate out features}<br />

16.
{ reorg system layout }<br />/var/nodester<br /> /api<br />/apps<br /> /nodester.com<br />/proxy<br />

17.
{ look at alternative sandboxing implementations }<br />

18.
SELinux?<br />http://selinuxproject.org<br /> set of kernel modifications and user-space tools that can be added to various Linux distributions<br />aligned with Orange Book (TCSEC)<br />mandatory access control (MAC)<br />

19.
{ create VM }<br />

20.
{ replace node-http-proxy }<br />

21.
{ break out components to own VM’s for production}<br />