Efficiency and Security Analysis of Self-Hosted Cloud Storage: A Containerized ZTNA, Docker, and PostgreSQL Approach

Zen Aufa Bahalwan; Arry Avorizano

doi:10.52436/1.jutif.2026.7.4.5518

Authors

Zen Aufa Bahalwan Informatics, Faculty of Engineering, University of Muhammadiyah Prof Dr HAMKA, Indonesia
Arry Avorizano Department of Information Technology, Faculty of Engineering, University of Muhammadiyah Prof Dr HAMKA, Indonesia

DOI:

https://doi.org/10.52436/1.jutif.2026.7.4.5518

Abstract

The enforcement of digital sovereignty mandates, specifically Indonesia's Government Regulation No. 71 of 2019, necessitates the adoption of private cloud infrastructures that facilitate strict data localization; however, traditional bare-metal deployments may exhibit less flexibility, while typical containerized solutions may not fully address the database integrity required for institutional scale1. This study proposes a secure, containerized self-hosted cloud architecture integrating Nextcloud, PostgreSQL, and Docker, secured via a Zero Trust Network Access (ZTNA) tunnel to achieve a "Closed-Default" security posture. To evaluate this architecture, the system was validated against a traditional bare-metal LAPP (Linux, Apache, PostgreSQL, PHP) stack using a novel Resource Efficiency Index (REI) designed to quantify the computational overhead of compliance alongside network throughput analysis over 50 iterations. Empirical results indicate that while the containerized architecture incurs a tangible virtualization overhead, resulting in a lower Resource Efficiency Index (69.44 vs. 83.51), it maintains statistical performance parity in network throughput (p > 0.05). Furthermore, the proposed architecture achieves superior CPU optimization (0.97% vs. 1.15%) and structurally reduces external attack surfaces. These findings provide a compliant, reproducible blueprint for Indonesian institutions, demonstrating that.

Downloads

Download data is not yet available.

References

A. Briasouli, “Data Security and Privacy in Cloud Computing-An Empirical Study,” International Journal of Advanced Research in Engineering and Technology (IJARET), vol. 13, no. 4, pp. 22–35, 2022, doi: 10.17605/OSF.IO/U93T6.

S. M. Reddy, M. Sana, M. Sushma, M. Divya Sri, and U. G. Student, “Enhanced Data Privacy and Security in Cloud Storage: A Robust Authentication Scheme for Cyber-Physical-Social Systems,” Journal for Educators, Teachers and Trainers JETT, vol. 15, no. 5, pp. 383–392, 2024, doi: 10.47750/jett.2024.15.05.38.

Indonesia Data Center Provider Organization - IDPro, “Indonesia’s Digital Sovereignty: From Narrative to National Strategy.” Accessed: Jun. 20, 2025. [Online]. Available: https://idpro.id/indonesias-digital-sovereignty-from-narrative-to-national-strategy/

Pemerintah Republik Indonesia, “Peraturan Pemerintah Nomor 71 Tahun 2019 tentang Penyelenggaraan Sistem dan Transaksi Elektronik. 2019.” Accessed: Jun. 20, 2025. [Online]. Available: https://peraturan.bpk.go.id/Details/122030/pp-no-71-tahun-2019

Y. Anitasari and A. F. Sampurna, “Policy Capacity of The Indonesian Government in Implementing Cross-Border Data Transfer Within Trade Agreements With The United States,” Asian Journal of Social and Humanities, vol. 3, no. 12, pp. 2139–2149, Sep. 2025, doi: 10.59888/ajosh.v3i12.618.

R. Baldoni and G. Di Luna, “Sovereignty in the Digital Era: The Quest for Continuous Access to Dependable Technological Capabilities,” IEEE Security & Privacy, vol. 23, no. 1, pp. 91–96, Jan. 2025, doi: 10.1109/msec.2024.3500192.

F. Sahab and A. Faizin, “IMPLEMENTASI NEXTCLOUD SEBAGAI CLOUD STORAGE MENGGUNAKAN RAID HARDDISK SEBAGAI REPLIKASI DATA,” JATI (Jurnal Mahasiswa Teknik Informatika), vol. 8, no. 6, pp. 11367–11375, Nov. 2024, doi: 10.36040/jati.v8i6.11292.

P. Haryani, R. Y. Ariyana, I. A. Majid, and Fx. G. P. Susanto, “Comparative Analysis of Nextcloud and Owncloud Performance as Infrastructure as a Service (IaaS) Based Cloud Storage,” Compiler, vol. 13, no. 2, p. 73, Dec. 2024, doi: 10.28989/compiler.v13i2.2667.

D. Darmawan, “Nextcloud: Keamanan Data Terbaik Dengan Manajemen File dan Pengguna yang Cerdas,” Jurnal Sosial Teknologi, vol. 4, no. 1, pp. 80–89, Jan. 2024, doi: 10.59188/jurnalsostech.v4i1.1130.

S. Dwiyatno, E. Rachmat, A. P. Sari, and O. Gustiawan, “IMPLEMENTASI VIRTUALISASI SERVER BERBASIS DOCKER CONTAINER,” PROSISKO: Jurnal Pengembangan Riset dan Observasi Sistem Komputer, vol. 7, no. 2, pp. 165–175, Sep. 2020, doi: 10.30656/prosisko.v7i2.2520.

A. M. Potdar, N. D G, S. Kengond, and M. M. Mulla, “Performance Evaluation of Docker Container and Virtual Machine,” Procedia Computer Sciences, vol. 171, pp. 1419–1428, 2020, doi: 10.1016/j.procs.2020.04.152.

V. S. Thokala, “Utilizing Docker Containers for Reproducible Builds and Scalable Web Application Deployments,” International Journal of Current Engineering and Technology, vol. 11, pp. 661–668, Dec. 2021, doi: 10.14741/ijcet/v.11.6.10.

S. V. Salunke and A. Ouda, “A Performance Benchmark for the PostgreSQL and MySQL Databases,” Future Internet, vol. 16, no. 10, p. 382, Oct. 2024, doi: 10.3390/fi16100382.

O. I. Alqaisi, A. Şaman Tosun, and T. Korkmaz, “Performance Analysis of Container Technologies for Computer Vision Applications on Edge Devices,” IEEE Access, vol. 12, pp. 41852–41869, 2024, doi: 10.1109/ACCESS.2024.3376570.

T. Kononowicz and P. Czarnul, “Performance Assessment of Using Docker for Selected MPI Applications in a Parallel Environment Based on Commodity Hardware,” Applied Sciences, vol. 12, no. 16, p. 8305, Aug. 2022, doi: 10.3390/app12168305.

H. Aqasizade, E. Ataie, and M. Bastam, “Experimental Assessment of Containers Running on Top of Virtual Machines,” IET Networks, vol. 14, Jan. 2024.

M. Sobieraj and D. Kotyński, “Docker Performance Evaluation across Operating Systems,” Applied Sciences, vol. 14, no. 15, p. 6672, Jul. 2024, doi: 10.3390/app14156672.

S. Ugale and A. Potgantwar, “Container Security in Cloud Environments: A Comprehensive Analysis and Future Directions for DevSecOps †,” Engineering Proceedings, vol. 59, no. 1, 2023, doi: 10.3390/engproc2023059057.

S. M. Zohaib, S. M. Sajjad, Z. Iqbal, M. Yousaf, M. Haseeb, and Z. Muhammad, “Zero Trust VPN (ZT-VPN): A Systematic Literature Review and Cybersecurity Framework for Hybrid and Remote Work,” Information, vol. 15, no. 11, p. 734, Nov. 2024, doi: 10.3390/info15110734.

T. D. Dinh, T. D. Le, T. T. H. Nguyen, and H. G. Do, “A Lightweight Zero-Trust Architecture Implementation for Enhancing Cybersecurity in Small and Medium-Sized Enterprises,” Journal of Telecommunications and the Digital Economy, vol. 13, no. 3, pp. 106–144, Oct. 2025, doi: 10.18080/jtde.v13n3.1284.

S. Rose, O. Borchert, S. Mitchell, and S. Connelly, “Zero Trust Architecture,” Gaithersburg, MD, Aug. 2020. doi: 10.6028/NIST.SP.800-207.

Microsoft, “What is Zero Trust?” Accessed: Jun. 20, 2025. [Online]. Available: https://learn.microsoft.com/en-us/security/zero-trust/zero-trust-overview

R. Febriyan and B. Yuliadi, “Implementation of Cloudflare’s Zero Trust Network Access at PT FHI,” International Journal of Computer Technology and Science, vol. 2, no. 3, pp. 62–72, Jul. 2025, doi: 10.62951/ijcts.v2i3.302.

P. Jaisudthi, P. Threerapat Sridee, N. Phungkoed, K. Srisuk, and V. Phueaknumpol, “Comparative Study of Modern VPN Solutions: Impact of Cloudflare, ZeroTier, and WireGuard on Network and Server Performance,” Engineering and Technology Horizons, vol. 42, no. 2, Jun. 2025, doi: 10.55003/ETH.420203.

T. Dealva Arsyad, I. Agi Berutu, K. Rifail Azis, N. Talitha Jehian, and D. Kiswanto, “IMPLEMENTASI FILE SERVER BERBASIS CLOUD MENGGUNAKAN LINUX UBUNTU 24.04 DAN NEXTCLOUD,” JATI (Jurnal Mahasiswa Teknik Informatika), vol. 8, no. 6, pp. 12595–12600, Nov. 2024, doi: 10.36040/jati.v8i6.12020.

A. Widarma, H. F. Siregar, and I. R. Sitorus, “Implementasi Cloud Computing Menggunakan Nextcloud Berbasis Infrastructure as a Service (IaaS),” CESS (Journal of Computer Engineering, System and Science), vol. 9, no. 1, pp. 336–346, Jan. 2024, doi: 10.24114/cess.v9i1.55993.

R. Jain, The Art of Computer Systems Performance Analysis: Techniques For Experimental Design, Measurement, Simulation, and Modeling, NY: Wiley. 1991.