VPS Providers, Licensing Concerns
Jul 26, 2008
so let's get this all hashed out... it'll be interesting to see how people handle various situations.
Before responding, let's keep this thread signature free.
I recently came across an issue where a customer wanted to bring their own Microsoft products/licenses to the table. Got a few questions for the other providers out there... this really needs to be hashed out.
Microsoft is very strict when it comes to enforcing their license policies, we all know this much.
So... when a customer wants to install their own software, what do people do to help ensure that whatever agreement you have with your upstream provider or Microsoft isn't in voliation by allowing someone to bring their own licenses?
What steps do you take to ensure validity of said licenses?
How do you define, much less enforce, these guidelines?
What role, if any, should a provider play in doing their part to help stem illicit license abuse?
View 3 Replies
ADVERTISEMENT
Jan 7, 2009
I have some concerns with hosting an external URL. I have these two websites www.benchmarkportal.com and www.bmponlinestore.com and my question is, is it possible for www.bmponlinestore.com to launch if ever I click on www.benchmarkportal.com/store/ url with the url name unchanged meaning it wont change to www.bmponlinestore.com?
scenario:
step : when I click on www.benchmarkportal.com/store/
result: the contents of www.bmponlinestore.com shows up but without changing the url name(the url will still be www.benchmarkportal.com/store/)
View 9 Replies
View Related
May 8, 2007
I have been involved in the development of a complex PHP web applications that does very large amounts of processing, includes several files with thousands lines of code, does multiple and complex db queries etc. So far it has been running only on non-public development servers and has been surprisingly fast given what it does.
But I am concerned about what might happen when it is time for it to start running on a website with many users.
Is there a way to estimate in advance how serious that problem may be?
View 3 Replies
View Related
Nov 7, 2008
I am hosting IPTV ( internet TV ) which might have copyright issue.
how to host website without copyright concerns ( might be in china or russian )
View 2 Replies
View Related
Sep 14, 2007
I am concerned about securing a windows server without the use of a hardware firewall.
I have an idea as follows:
1) have a dedicated server running linux
2) run VMware Server edition on this linux box to host the windows 2003 server.
3) use iptables etc to secure the outer linux layer (only allowing required ports through to the windows box etc)
What does everyone think - is this a potential runner? am I overdoing things?
View 2 Replies
View Related
Oct 16, 2009
I'm starting to test out VPS panels and found vePortal 2. I purchased it and installed it. Now I'm checking some security, as we all know about the terrible result of HyperVM as everyone blindly used it because it was "pretty" but it was not secure.
Some serious concerns I'd like to share with vePortal 2.
1) It makes no backups of any of the files it modifies during install, or so I haven't seen any, like httpd.conf.... more of a pain than anything. There is no way to auto uninstall it either..
2) vePortal gives full root access to the Apache user, letting apache run any root commands!
They add this to your /etc/sudoers
apache ALL=(root) NOPASSWD:ALL
[root@nd11108 myadmin]# su -s /bin/sh apache -c "whoami"
apache
[root@nd11108 myadmin]# su -s /bin/sh apache -c "sudo whoami"
root
This is a root exploit waiting to happen. I asked them about this and got the response.
Quote:
It would be a security breach if a) apache was allowed SSHD Access, or b) the server was running scripts that havn't been marked secure, We have a very comprehensive team of beta testers including one of the largest providers around, They and their staff have not been able to break the security or integrity of the panel as of yet.
All panels in one way or another have root control over the system, for example they wouldnt be able to have a SSH Console without it, as only specified commands would work, we do have a list of the commands required by vePortal if you wish to limit it, but the console and the Shell Commander functions would stop working.
Regards,
Gavin H.
Chief Information Officer
That's funny I have been using the panel a few minutes and already found they've ignored the biggest security hole possible..
3) In 5 minutes I've found multiple XSS vulnerabilities in the admin area... Like search customers, I was able to generate JavaScript alerts in multiple fields....
4) It stores the MySQL root password in clear text in a .php file... yeah that's real secure. Why does it even operate under the MySQL root user, its using a single database....
5) I forgot to add, it doesn't recognize ANY OpenVZ Vps's you've created manually. It has no idea they exist and you cannot view them at all.
I'm sure I could dig deeper into the source code and find more but it's not worth it. Judging by what I found without actually trying to spend time on security I completely removed the product.
The panel does look nice but it sure gets a mark of insecure for me, I would advise others seriously look into the security of this new panel if you're considering using it.
View 14 Replies
View Related
Mar 1, 2007
I have just finished testing with my HP DL380 G3 server and I have been looking at different companies / facilities to ship it off to for co-location.
How do you ease your own concerns of hardware failures on the server (aside from HDD which are easy to replace) when it is so far away.
I control a datacenter / networking environment for my company, so I have immediate access to any of our gear that breaks, but I will not be co-locating within our facility for obvious reason.
Are most people using left over Dell / Compaq / HP stuff or custom builds? I went with HP because of the built-in iLO capability to lessen the need for so much remote hands in the event of a reboot etc.
I guess the biggest thing that is worrying me right now is a catstrophic hardware failure such as motherboard / cpu. All others can be quickly fixed (HDD, RAM, etc), but with a motherboard / cpu failure, the extended downtime can be long while spare are ordered / shipped.
View 6 Replies
View Related
Jul 29, 2008
Unlike earlier versions of Microsoft Windows Server, the 2008 version gives you a default logon screen that is very similar to Vista. Instead of the the interactive dialog box that prompts you for a username, password, and sometimes domain, users will find a “push button” screen displaying all users with login permissions. To log into an account all the users will now need to know is the password. This makes things much easier for hackers as the only thing they will now need to guess is the password.
There are a couple of ways to resolve this problem. First, the server administrator can set the local security policy to not display the last username and disable fast user switching. Second, in the System Remote Settings dialog, the remote desktop options can be set to allow computers with Remote Desktop that support Network Level Authentication.
Since the first method is covered in a few blogs, I’ll limit myself to discussing the second method. In the latest versions of Remote Desktop Connection client (version 2.0 for Mac and the version shipped with Windows Vista), Network Level Authentication is supported. This means users must send the username and password before Windows 2008 accepts the connection. Earlier versions of RDC (like the one found in many installations of Windows XP) don’t support NLA. So technically, users will only need to supply the IP or domain name of the remote Windows server, leave the username and password blank, and interact with the logon process that is provided at connection time. Windows 2008 servers that do not have the NLA option set for remote desktop connections are vulnerable since the interactive logon screen (post-connection) is displayed to users using earlier versions of RDC.
This last point may be of significance to service providers offering Windows 2008 dedicated servers. If the server is set up with default settings, the NLA option is disabled and new users will by default be made to change passwords on first logon. Users using new versions of RDC will not be able to logon because the initial password change sequence on first logon is not compatible with NLA. The server will return an incorrect password message to the RDC client even though the user has provided the correct username and password. The only way to establish first connection is thus to use a non-NLA supporting version of RDC so that the user can establish connections without supplying credentials and then going through the password change wizard during the initial login. But as mentioned, having NLA disabled on server side is not an ideal practice at this point.
So there are a couple ways to do this. The service provider should disable the “change password on next logon” option during the user creation process and get user to manually change the password after logon. Or alternatively, assist the client/user in changing passwords through the console internally.
View 0 Replies
View Related
Oct 7, 2009
Which VmWare product allows me officially to use it for VPS hosting business (ESXi does not allow that)? Do you have a link to document where they specifically authorize use of their software to make and sell VPS? Are there any legal limitations? What about vSphere standard?
What about Xen, what are limitations of free version? Which payed version is best for VPS hosting, are there any legal limitations?
View 4 Replies
View Related
Jul 9, 2008
i was thinking about partitioning my servers into a number of VPSs to sell.
in regard to offering cPanel, i see that licensing is $425 a pop. is there any way of registering for multiple servers at a low cost.
View 5 Replies
View Related
Apr 12, 2008
how does Windows handle licensing on Virtual Dedicated Servers? Does SPLA licensing cost the same as a full dedicated server?
This would be a VMware server, with multiple Windows virtual servers.
View 2 Replies
View Related
Apr 15, 2008
I'm sure this has been covered before, but during my search I didn't find much, maybe someone can point me in the right direction.
Okay, so here's how it goes...
I, and a partner, plan on purchasing a 2U server and we're going to co-locate this server in Chicago. This server will be serving a new gaming company we plan on opening. Now, my main issue is obtaining Windows for this server. I have found plenty of retail CD's with like a 5 CALs included, but that was in the $750-$1000 range, which I understand this is what Windows server really cost, but I believe I could find it cheaper.
Does anyone know the BEST, and preferably the cheapest place to buy Windows Server 2003 (Specifically Standard 64bit - R2) or even an "external" monthly license, if such exist. I am new to the entire Windows Server licensing and pricing stuff, so any information would be very much helpful.
View 3 Replies
View Related
Nov 22, 2008
if anyone has an idea of which dedicated provider has the most reasonable prices when it comes to Virtuozzo licensing. I have looked at several and it seems prices vary.
View 9 Replies
View Related
Apr 19, 2007
Is there any difference between lincense cost of windows 2003 server SE for virtual server and standalone physical server?
View 0 Replies
View Related
Sep 14, 2007
I'm helping one of my clients setup some windows VPS's but we're having some serious confusion as to how the licensing works.
I've read on microsoft.com that they now are far more accepting of virtulization and allow, with a single license, anywhere from 4 to unlimited VPS installs with it.
Now, my question is: Does this count with leased licenses? Say I leased a license from my datacenter (say i did 2k3 STD) for $25/m. Would I then be allowed to install it on however many VPS's allow under MS without issue or how does that exactly work?
View 3 Replies
View Related
May 13, 2007
Whats the most cost effective method of purchaseing cpanel licenses for colocated servers?
View 12 Replies
View Related
May 16, 2007
From the posts in this forum it would appear that a number of forumites are colocation service providers and web hosters that use Cisco gear.
I was reviewing the Cisco End User License Agreement that was included in the router box. Under the General Limitations section, "Customer shall have no right, and Customer specifically agrees not to:", item (iv) states, "use or permit the Software to be used to perform services for third parties, whether on a service bureau basis or time sharing basis or otherwise, without the express written authorization of Cisco".
Does this mean that a service provider is required to acquire
a separate license similar to the Microsoft Service provider license?
View 2 Replies
View Related
Aug 3, 2007
My understanding is that the IOS software running in most of their products is non-transferable. So clearly this prevents a user from receiving updates if they purchase used hardware (i.e. ebay). However, isn't it possible to purchase an IOS software license from Cisco for any of their supported product?
Their web site is a mess! I've spent, literally, hours on their site trying to figure out how to purchase such a license, or how to purchase a service plan that might entitle me to IOS updates.
And how does "SMARTnet" fit into this puzzle? Do I need a SMARTnet contract to download maintenance updates, even for *new* hardware that I've purchased?
View 2 Replies
View Related
Sep 11, 2009
I have problem locating the Licensing module which allow us to add/delete CALs/Processor licenses, where is it now in Windows 2008?
View 0 Replies
View Related
Apr 30, 2009
Can anyone give me some insight on how VPS licensing works with SPLA? According to my reseller, each VPS needs its own standalone license which seem to differ with what I read somewhere about Microsoft Server 2008 allowing up to 8 virtual stances with 1 license or something like that.
View 1 Replies
View Related
Sep 11, 2009
Heads Up.
Forget everything you've learned about Windows Server "authenticated" and "unauthenticated" licensing for your monthly SPLA reports. The game has completely changed, and NOT for the better.
Microsoft has changed to "outsourcer" and "non-outsourcer" licensing instead.
Quoting Microsoft:
Quote:
"Outsourcing is an application or service that a service provider manages for their customer. For purposes of this definition, the managed application or service is:
(a) Used by its customer's employees, contractors, agents, or vendors
(b) Not the service provider's intellectual property
I contacted MS directly for clarification on how this applies to webhosting. The response was, if the service provider is (and I quote), "simply managing the infrastructure layer and not managing anything else... in other words just keeping the lights on", that is non-outsourced.
If you are providing any software or management of the environment, even something as simple as Windows Updates or other basic management tasks on the server-- which is the case, for example, if you are running a shared webserver, then it is "outsourced".
Your email server is providing a service that is considered an outsourced service, and you must report (and pay for) an "outsourced" license for that server.
And here is the bad news.
Under the old terms, the Datacenter edition of Windows Server (which allows unlimited VMs at no additional charge on the machine where the license is assigned) cost just under $50/month.
The new "outsourcer" Datacenter license is nearly $250/mo. Yes, you read that right, a whopping 400% monthly license fee increase for Datacenter edition.
A single copy of Windows Server Standard edition is over $75/mo. when used in the outsourcing role.
Other pricing and terms have changed as well, so grab a copy of the new SPUR and READ it. All it takes is a moment of uncertainty to put you wildly out of compliance under this new layer of insanity.
View 14 Replies
View Related
Nov 3, 2009
Microsoft said this about Microsoft Licensing for Virtualization
Windows Server 2008 Datacenter
Run any number of software instances in physical and virtual operating system environments on a server.
Now,I have some questions:
1)Is this method of licensing just for hyper-v or we can use it on vmware ESXi or Xen?
2)How we can use Microsoft Volume Licensing on Vmware ESXi and Xen?
3)What is the best solution for windows virtualization?(vmware esxi or hyper-v or xen)
4)what is difference between xen and xenserver?
5)which control panels we can use for hyper-v,vmware ESXi and xenserver?
View 4 Replies
View Related
Jul 13, 2008
where can I find cheapest virtuozzo licensing or even dedicated server with virtuozzo licensing. Budget is $300/mo. Bandwidth needed at least 10tb/mo.
View 10 Replies
View Related
Nov 17, 2008
Our local authority is looking into using MySQL database for some internal applications and possibly our website.
Do we need a commercial or enterprise license for this particular use or can we use a free version?
View 2 Replies
View Related
Jul 10, 2008
where can I find cheapest virtuozzo licensing for 100 vps?
View 2 Replies
View Related
Mar 21, 2007
I bought Windows Vista Ultimate OEM and installed it on the physical machine, can I install Virtual Server 2005 and install the ultimate OEM version again on the VIRTUAL server 2005??
I run MySql but I hate to run it on the physical machine, want to run on a virtual machine.
View 3 Replies
View Related
Feb 28, 2008
if I have a dedicated server with WS2003, would I be allowed to install my own software (with license)? such as MS SQL Server - I have an MSDN subscription and multiple licenses.... would this be ok to do so?
What about Exchange Server? I have a License for that also...again, MSDN subscription
View 3 Replies
View Related
Aug 12, 2008
I will be running Plesk.
I only need 1 user, Administrator with full Remote Desktop Connection access.
But I need to be able to serve websites using Plesk.
View 2 Replies
View Related
May 23, 2008
I currently have a server (Xeon 1x5310, 4gb RAM, 4x500gb hdd in Raid 10) with Windows 2003. Now do to a project I'm looking at installing Windows 2008 and upgrading to 2x5310 and 16gb of RAM on my server.
I'm looking to create a virtualized test environment for development of a new web service I'm working on. What I'm looking to develop right now is 2 file servers, 3 web servers, 3 MS SQL database servers and 1 DNS server (would prefer but not sure if hardware can handle it. Virtualization would be ideal as this is very similar to what we believe will we have when we launch the service.
I have a few questions I'm hoping you might be able to answer:
1) With the upgraded hardware specs, should it be able to handle the load if I assign each virtual entity 1 core with 2gb of RAM each?
2) I would like to create each of the multiple servers in a cluster (ie cluster of webservers) as this is how it will be in production. But, I've never worked with clusters before so:
a) where can I learn about clustering windows 2008 servers?
b) is this possible to do in a virtualized environment?
3) How does MS work the licensing? I want to have each server running Windows 2008 and 2-3 of them running SQL Server 2005.
a) Do they charge extra for each virtualized server?
b) Does this mean I have to purchase 3 complete copies of SQL Server or is there a way I can pay a low license fee for use in a non-commercial, non-production environment?
4) Does anyone see any problems with this setup or have any suggestions for me?
* I do have money available to spend on a good solution, so if you have suggestions that cost please let me know. I just thought virtualization would be the way to go as the project will be in development for at least a year with no public access.
** I realize that Hyper-V hasn't been released yet (that I know of) so information on it might be limited
View 2 Replies
View Related
Apr 17, 2015
I've asked sales a few times but they don't seem to know...what counts as a "website?" In PPA as a test we set up two subscriptions and one mail-only secondary domain on one of them. The Services/Websites tab lists all three, but only two are marked as Website under Hosting Type while the third is marked No Hosting. Does that count as two websites for license purposes, or three?
I'm trying to plan for multiple domains, subdomains, etc.
View 1 Replies
View Related
Jun 6, 2008
I am considering to move to a VPS (from a dedicated: P2.8, 512MB). Can you please recommend me some nice providers in the UK?
I would go with wiredtree.com but they dont have servers in the UK...
View 14 Replies
View Related
