Key Services and Servers in the Network Layout

The placement of key services in the Rouge Construction Corporation network is
designed to support reliability, security, scalability, and the company’s long-term strategic goals.
The primary corporate office in Anytown, Kentucky, which supports over 400 employees with
projected growth, hosts the centralized data center infrastructure. All critical servers are
positioned behind redundant next-generation firewalls (RC-CORP-FW1 and RC-CORP-FW2)
and connected to dual Layer 3 core switches (RC-CORP-SW1 and RC-CORP-SW2) to ensure
high availability and fault tolerance.

RC-DC1 (DHCP) and RC-DC2 (DNS and Directory Services) are deployed on Windows
Server 2022, running on enterprise-grade Dell PowerEdge R550 servers. These domain
controllers are placed in the secure server subnet and connected directly to the core switches,
ensuring rapid authentication, reliable IP address management, and centralized identity services
for all office locations and remote VPN users. This placement supports operational efficiency
and consistent policy enforcement across the organization.
Linux-based servers are selected for deployment flexibility, cost efficiency, scalability,
and stability (Nemeth et al., 2017). RC-APP1 (LDAP Server) and RC-EX1 (Email Server) run
on Ubuntu Server LTS, deployed on HPE ProLiant DL360 Gen10 hardware, and are located in
the internal server VLAN behind the firewalls. This placement enables secure internal
authentication and communications while allowing controlled access for remote users. RC-SQL1
(Database Server) runs on Rocky Linux, chosen for its enterprise compatibility and long-term
support. It is isolated within the server network to protect sensitive operational and financial data
critical to reducing material costs and improving supply chain efficiency.

The RC-WEB1 Web Server, running Ubuntu Server 24.04 LTS, is placed in a DMZ
segment behind the firewalls, enabling public access to Rouge Construction’s services while
preventing direct exposure of internal systems. Lastly, RC-BACKUP1, running Windows Server
2022, is positioned in a restricted backup VLAN to securely store system-wide backups and
ensure business continuity.

Server Roles, Software, and Hardware Selections

References

Nemeth, E., Snyder, G., Hein, T. R., Whaley, B., & Mackin, D. (2017). UNIX and Linux System
Administration Handbook (5th ed.). Addison-Wesley Professional. ISBN-13:
‎9780134277554.