AWS to host PostgreSQL

[ADJob]

Hi,

> We have converted our program to SQL using Omnis Studio 8.
> 
> We have been considering different distribution scenarios, and have been playing around with Amazon Web Services (AWS) hosting a Postgres database, and installing the Omnis/Library application on the user's computer. This gives the user a full desktop experience and it is easy for us to maintain the back end. It looks like this will work work well for us and many of our customers.
> 
> I have 2 questions/requests for comments.
> 
> 1. Is anyone else doing this? 

Yes. Started about 6 years ago by evaluating and testing.

> Are there pitfalls for going down this path?

VPS, Droplets or VPC. To me it is all VPS. I evaluated about 10 VPS vendors before I finally decided. My list of demands (no priority order):

1. Easy to maintain (VPS cluster control panel)
2. Easy price structure. What does it really cost? (AWS and Azure was out because of this) 
3. Speed.  https://upcloud.com/compare/aws-ec2/
4. Reliability (Windows was out. Had to restart every month because it stalled. Not to mention all updates).
5. Safety (SSL and easily maintained firewall)
6. Root access
7. Debian default. (set and forget)
8. Limited NSA access and GDPR safe
9, Expandable
10. Reliable Snapshot backups. (incremental backup not reliable)
11. Own VPS templates

It ended up with a scandinavian vendor: UpCloud. 

https://www.upcloud.com/register/?promo=R64RC4 (try it free)

Besides UpCloud to control the cluster of servers:
1. Debian (long maintenance cycles and rock solid)
2. Webmin to control the VPS (simple and good enough)
3. PgAdmin4 to control Postgresql
4, Omnis as frontend

> Are there better ways of distribution?

In my opinion - No.

> 2. To provide security, we have been controlling access to the db using IP addresses.
> If the user has a fixed IP, this works nicely. Are there serious security issues with relying on this method?
> I suppose the data is passing over the internet unencrypted, including access credentials. A problem?

I think Bas covered this well.

/Mats