FunkyRes wrote:
In fact, you can even run the sql servers without any public interface allowing them to serve several front ends without the security risk of the exposed ports.
But if you run everything on a single server, your mysql "port" can be filesystem socket, which also eliminates the exposed msyql ports.
Multiple systems (virtual or not) mean multiple systems to keep patched. One big system means less duplication of resources and efforts. A lot depends on whether the various services you want to support are independent (which would lead me towards multiple servers) or heavily interdependent (might as well run them on one big server, IMHO). Dealing with trade-offs is a basic design problem, and always sucks :-)