MongoDB Hosting: NoSQL Database Tren VPS Offshore

MongoDB Atlas tien loi nhung danh doi quyen rieng tu va chi phi. Bang gia M30 cua Atlas ($230/thang cho 8GB RAM) cao gap doi VPS Pro AnubizHost ($24.99/thang) ma con kem linh hoat hon. Quan trong nhat, Atlas chi luu tru du lieu trong cac vung AWS/GCP/Azure - tat ca deu thuoc jurisdiction My voi luat CLOUD Act co the buoc cung cap du lieu xuyen bien gioi.

Tu host MongoDB tren VPS offshore tai Iceland mang lai bon loi the cot loi:

• Toan quyen kiem soat cau hinh: Tu chinh storage engine, journaling, write concern cho den authentication mechanism.
• Khong bi tinh phi theo IOPS: Atlas tinh tien rieng cho storage IOPS, co the doi gia bat ngo. VPS Iceland co dia NVMe gia co dinh.
• Iceland privacy law: Du lieu duoc bao ve boi luat rieng tu cua EU va Iceland, khong roi vao thoa thuan Cloud Act.
• Thanh toan Bitcoin/Monero: Tach biet danh tinh tai chinh khoi du an, dac biet quan trong cho cong cu chong giam sat va whistleblowing.

Cac startup va doanh nghiep vua xay dung ung dung document-oriented thuong tiet kiem 60-70% chi phi khi chuyen tu Atlas sang AnubizHost VPS, voi hieu nang tuong duong hoac cao hon.

Cai dat MongoDB 7.0 chinh thuc tren Ubuntu 22.04:

curl -fsSL https://www.mongodb.org/static/pgp/server-7.0.asc | \
  gpg -o /usr/share/keyrings/mongodb-server-7.0.gpg --dearmor
echo "deb [arch=amd64,arm64 signed-by=/usr/share/keyrings/mongodb-server-7.0.gpg] https://repo.mongodb.org/apt/ubuntu jammy/mongodb-org/7.0 multiverse" \
  | tee /etc/apt/sources.list.d/mongodb-org-7.0.list
apt update && apt install -y mongodb-org
systemctl enable --now mongod

Mac dinh MongoDB nghe tren 127.0.0.1 - tot cho VPS rieng. KHONG mo ra 0.0.0.0 truc tiep. Tao admin user truoc khi bat authentication:

mongosh
use admin
db.createUser({
  user: "rootadmin",
  pwd: "strong_random_password",
  roles: [{role: "root", db: "admin"}]
})

Mo /etc/mongod.conf va bat security.authorization: enabled. Khoi dong lai MongoDB. Tat ca ket noi tu xa nen di qua SSH tunnel hoac WireGuard VPN, khong mo cong 27017 ra Internet. Su dung TLS bang cach sinh chung chi va dat net.tls.mode: requireTLS. Cau hinh nay loai bo gan nhu hoan toan rui ro tu cuoc tan cong scan internet va ransomware MongoDB.

Replica set la chuan production cho MongoDB. Voi 3 VPS AnubizHost o cac vi tri khac nhau, ban co the trien khai replica set 3 node co failover tu dong. Tren moi node, sua mongod.conf:

replication:
  replSetName: "rsAnubiz"
net:
  bindIp: 127.0.0.1,vpn_internal_ip

Khoi tao replica set tu primary:

rs.initiate({
  _id: "rsAnubiz",
  members: [
    {_id: 0, host: "node1.local:27017"},
    {_id: 1, host: "node2.local:27017"},
    {_id: 2, host: "node3.local:27017", arbiterOnly: true}
  ]
})

Khi du lieu vuot vai tram GB, can sharding. Trien khai config server replica set, mongos router va shard server tren them 3-5 VPS. AnubizHost ho tro mo rong nhanh chong voi gia minh bach.

Backup tu dong nen ket hop mongodump hang ngay voi snapshot file system. Ma hoa backup bang GPG va day sang storage offsite khac jurisdiction de chong rui ro chinh tri. Toan bo chien luoc nay tao ra mot kien truc MongoDB resilient, an toan va co chi phi du doan duoc, vuot xa kha nang ma Atlas DBaaS cung cap.