INFRASTRUCTURE
How a request reaches your site.
A high-level look at the layers between a visitor and a site hosted on NevaraCloud, and what each one is responsible for.
Architecture diagram
- VisitorA browser in Colombo, Kandy or London requests yourbusiness.lk.
- Cloudflare edge300+ locations. Serves cached files, terminates SSL, filters DDoS traffic.
- NevaraCloud serversAMD EPYC CPUs and NVMe SSDs run your site, Node.js app or containers behind firewalls.
- Data servicesManaged MySQL, PostgreSQL and Redis, depending on your plan.
LAYER 1
Cloudflare at the edge.
Your domain points at Cloudflare, not directly at our servers. That does three jobs before a request ever reaches us:
- Caching. Images, CSS and JavaScript are stored at edge locations near your visitors, so most of a page loads from nearby rather than crossing the world.
- SSL. HTTPS certificates are issued and renewed automatically.
- Protection. Automated DDoS mitigation filters attack traffic, and the origin servers are not exposed as the public address of your site.
Want to do the same on your own server? See putting Cloudflare in front of a server.
LAYER 2
Compute and storage.
Requests that need your application — a WordPress page that isn't cached, an API call, a checkout — go to NevaraCloud servers with AMD EPYC processors and NVMe SSD storage. NVMe matters most for database-heavy sites like WordPress and shops, where many small reads and writes happen per page.
Servers sit behind firewalls. Pro sites get 2× CPU priority for heavier workloads, and container workloads are sized per project.
LAYER 3
Databases and caching.
Business and Pro include a managed MySQL or PostgreSQL database, so you don't install, tune or patch one yourself. Pro adds Redis for object caching, which takes repeated database work off busy WordPress and WooCommerce sites.
RECOVERY
Backups.
On Business and Pro, sites and databases are backed up automatically every day and each backup is kept for 7 days. If an update breaks something or a site is compromised, message us and we restore a known-good copy.
Keep your own copy of anything you can't afford to lose, too — your code in Git and an occasional export of your content. Our support & billing page covers what we back up and what we don't.
SECURITY
What we don't publish, and why.
We don't publish server providers, regions, IP addresses or internal network layout. That information helps attackers more than it helps customers. If you need specifics for a compliance review, ask us directly.
Keep reading
- HOSTINGCloud hosting in Sri LankaWhat managed cloud hosting is, who needs it, and how NevaraCloud's LKR-billed plans work.
- GUIDEHow to secure a Linux server: the first hour checklistThe security steps to take on any new Linux server: SSH keys, no root login, a firewall, automatic updates, fail2ban, backups and monitoring.
- PAGESupport & billingSupport hours and channels, response times, LKR billing, cancellation, backups and service limits.
Questions about where your data lives?
Ask us on WhatsApp or email. We'll answer what we can for your situation.