This section describes some of the best practices for Dell APEX Block Storage for AWS regarding security, achieving optimal performance, and resilience.
- Deploy the storage cluster across different Availability Zones using PowerFlex fault-sets feature for increased availability and fault tolerance. When AZ resiliency is not critical, PowerFlex can be deployed in a single AZ.
- Backend database EC2 instances (c5n) should be in private subnet and not internal facing, for increased security. They can be behind a NAT gateway that allows to download software updates and packages.
- Use a public subnet for external-facing resources that communicate with the Internet.
- Use appropriate EC2 instance and volume types, for instance, store or EBS storage types that are optimized for low latency and high I/O performance.