More than not we find ourselves talking about what introducing cloud computing to a business’ infrastructure means to its existing team. Many are worried that skill sets don’t requirements for handling cloud infrastructures. Fear, as in so many other scenarios in life as well, prevents human beings from taking next steps and in this case leads to a no-deal-scenario for us many.

Designed for Scalability

For both Drupal and WordPress, we’ve designed templates based around an architecture we know can scale easily. We use Amazon’s high-throughput RDS as a backing store for the site, and configured an auto-scaling pool of Amazon’s EC2 cloud instances as the web servers combined with a load balancer to distribute incoming requests. We’ve engineered the best way to run Drupal and WordPress in the cloud.

By separating the web servers from the database, we allow both of them to run faster and respond to requests with lower latency. And by using an auto-scaling pool, we allow you to choose how many instances are available to serve your blog: more when you’re expecting high traffic, and fewer when you don’t need as much.

Security Best Practices

One major concern for anyone running off-the-shelf sites is the risk of getting hacked. We’ve brought a lot of security expertise to the design of our CloudFormation templates, and it really shows in the WordPress and Drupal architectures. To start, we’ve isolated the entire installation in a virtual private cloud (VPC) and firewalled off incoming traffic unrelated to the site. All the servers are completely walled off from the rest of the internet, stopping a whole host of malware and drive-by hacks that Drupal and WordPress are notorious for.

On top of that, we’ve added a few pieces of security preferences and best practices we’ve developed along the way, like our bastion server for SSH access. We’ve also configured the sites themselves to have the latest security updates. The bottom line: while nothing is ever perfectly secure, we’ve moved very far in the right direction.