1.
Principles for overall architecture selection and deployment
- Goal: Ensure stable front-end e-commerce, high availability of ERP backend, and real-time data synchronization.
- Region selection: Hong Kong node handles Chinese mainland/Hong Kong/Macau/Taiwan traffic, Singapore node handles Southeast Asia traffic and backup.
- Service split: Front-end static uses CDN, application layer uses ECS/SLB, database runs RDS/backup to OSS.
- Security First: Deploys Alibaba Cloud DDoS protection, WAFs, and security groups to minimize open ports.
- Operation and maintenance requirements: log centralization, monitoring alerts, and automatic scaling rules covering e-commerce promotion peaks.
2.
Server configuration and bandwidth example
- Production example (Alibaba Cloud Hong Kong ECS): 2 vCPU / 8 GB memory / 50 GB SSD, bandwidth 200 Mbps.
- Read-Write Separation Example (Singapore ECS): 4 vCPU / 16 GB Memory / 120 GB NVMe for batch synchronization and off-peak computing. <br />- Database (RDS for MySQL) :d b.m5.large, equivalent to 2 vCPU/8GB, master-slave latency < 100 ms.
- Cache (Redis): Redis.sentinel 4GB, used for session and hot product acceleration.
- Storage and Backup: OSS cold storage is used for historical orders, with snapshots taken once daily and backups retained for 30 days.
3.
Real case: ABC e-commerce company migration experience
- Issue: Before migration, single-point architecture, page response time was 3.2 seconds when concurrent 10k was during the promotion period.
- Deployment solution: Hong Kong frontend + Singapore backend, using SLB for seven layers of loading, Alibaba Cloud CDN accelerating static resources.
- Security Policy: Anti-DDoS Pro and WAF have been launched to adapt and intercept abnormal traffic. <br /> - Result: Average page response dropped to 1.1s, 99% request latency < 300 ms.
- Operations benefits: failover time reduced from 2 hours to 5 minutes, with annual O&M costs reduced by about 18%.
4.
Practical details of CDN and DDoS protection
- CDN configuration: All static resources are managed via Alibaba Cloud CDN, nodes cover Hong Kong, New Zealand, and Southeast Asia, with a cache hit rate target of > 85%.
- Protection Policy: Anti-DDoS Pro sets traffic alert thresholds and automatic blocking rules.
- WAF rule: blocks SQL injection, XSS, and common BOTs, enabling whitelisting and rate limits.
- Monitoring metrics: real-time monitoring of bandwidth utilization, peak concurrency, error rate (5xx), cache hit rate.
- Drills and Rollbacks: Conduct DDoS drills and traffic switching drills quarterly to ensure business continuity.
5.
Performance data comparison (sample table).
| node | average latency (ms). | peak concurrent bearer | average page response (s). |
|---|---|---|---|
| Hong Kong (ECS+CDN). | 120 | 10,000 | 1.1 |
| Singapore (backend processing). | 180 | 8,000 | 1.5 |
- The table shows approximate indicators observed after migration and can serve as a reference for capacity planning.
- It is recommended to multiply the business peak by 1.5 as the safety factor.
6.
Operation and cost optimization recommendations
- Elastic scaling strategy: Automatically scaling CPU/memory thresholds for stateless services.
- Reserved Instance to On-Demand Ratio: Long-term stable loads prioritize reserved instances to save 30%+ in costs.
- Traffic Tiering: High-frequency resources use CDN caching, and database read-write separation reduces master database pressure.
- Monitoring automation: Use cloud monitoring + custom alarm scripts to shorten fault response times.
- Compliance and Backup: Cross-region backup and offsite disaster recovery, with regular recovery drills to ensure RTO/RPO compliance.

- Latest articles
- Popular tags
-
Key Factors To Pay Attention To When Choosing A Singapore Cloud Server
when choosing a singapore cloud server, you need to pay attention to multiple key factors, including performance, price, service provider reputation, etc., to help you make informed decisions. -
Recommend The Best Solution For Singapore Vps To Support Naifei
this article recommends the best vps solution in singapore, especially dexun telecom that supports naifei, to help users choose the appropriate network service. -
Singapore Cmi Vps Control Panel Operation Tutorial And Common Function Configuration Guide
detailed singapore cmi vps control panel operation tutorial, including step-by-step practical guides for logging in, creating instances, network firewalls, ssh configuration, snapshot backup, system reinstallation and common maintenance operations, with faqs.