Railsformers and its security
At Railsformers, we make sure that the security of all our systems always meets the latest requirements and standards. All our servers are backed up daily to a separate server; the servers are also equipped with RAID technology, which ensures that no data is lost in the event of a disk failure. All servers are housed in a TIER III data center (redundant air conditioning and power, a fire protection system, physical security, and dual connectivity to the servers), together with the servers of the most visited web portals in the Czech Republic.
In terms of software, we use regularly updated, up-to-date versions of the Debian Linux operating system. All servers have a carefully configured firewall so that visitors only see the services they actually need to see. Only developers and administrators from Railsformers have access to everything else. We automatically deploy SSL security on all websites so that no data flowing from the user to us can be compromised. We monitor our entire network with the Munin monitoring system, which is becoming an industry standard, and every application is automatically restarted after a crash or failure. As one of the few in the Czech Republic, we use Sentry, a system that informs us about errors occurring while an application is running, so we don’t have to rely solely on feedback from users.
The nginx web server version is 1.10.1 with the Google PageSpeed module 1.11.33.2 to ensure maximum web server performance, Percona Server 5.7 as a replacement for the underperforming MySQL server, and the Ruby on Rails framework version 4.2. Between the web server and the application itself in RoR runs the powerful Puma web server, capable of handling a large number of requests per second while making full use of modern server hardware capabilities.
In addition to IPv4 access, we fully support the IPv6 protocol.
Databases, applications and temporary files are stored on SSD drives to maintain maximum data throughput and low latency. Our servers are from Sun Microsystems; we have access to KVM for all of them, which allows us to diagnose, for example, a hardware fault without needing to be physically present in the server room, speeding up its resolution.