How to achieve SLA // Architecture Discussion

[maaft]

Hi,

I just want to start a discussion about how this framework can be used to achieve some SLA requirements.

Has anyone put some thought into it?

From the top of my head, here are the points where k3s on hetzner currently lacks:

1. single load-balancer -> single point of failure
2. no DDoS protection
3. no WAF
4. no network/connectivity SLA
5. no guarantees on storage
6. something else?

I think one could eliminate 1-3 by using a combination of multiple clusters deployed in different regions + using cloudflare business.

Open questions:

1. how to determine network SLA? Does hetzner have a single backbone network that might fail?
2. use a 3rd party CSI like azure-csi? What about latency?
3. how to host databases ?
   a. for postgres, one could use cnpg and backup WALs to e.g. azure blob storage. Failover clusters can host cnpg-replica clusters and will be usable right out of the box on failover.
   b. alternatively, use an external managed database service -> latency/security issues?

What did you do to achieve some level of SLA using this tool? What is missing for you?