Dedicated Or Reseller Setup With Virtualization Or Decent Chroot Setup
Jul 31, 2008
As my clients' needs expand, they're asking for chroot ssh/sftp setup. I'm currently on a dedicated Linux setup but don't really have the time to set up a whole new box with full virtualization or investigate a full chroot solution (baby on the way), and to be honest it would be less hassle to move to a new provider than worry about down time with sites.
What I'm looking for:
- linux hosting
- hosting for 30+ accounts, some with several domains
- at least 6 IP addresses for SSL certs
- each account in a full chroot environment (ssh/sftp/ftp) so they can't poke around each others' files, or each account set up in a virtual machine setup (ie: openvz)
- maildir
- spamassassin
- php 5, mysql, perl 5.8.8
- suexec apache would be nice
I'm curious, how do you all Cpanel server owners setup reseller accounts for clients? I find myself doing it this way (providing 2 static IP's, for ns1/ns2)
1. create reseller account 2. ssh > edit nameserverips and manually add ns1/ns2 to the two select IP's of choice 3. change account IP to first main static IP, in whm
Any one else do it this way, or another method? I use WHMCS also, which creates the account automatically, but I have to edit nameserverips and appy ns1/ns2 manually in whm (A dns zone) manually.
Also, I'm wanting to upgrade some of the PHP 4 / MYSQL 4 boxes to PHP 5 / MYSQL 5. Is it worth it, or not? If yes, what methods could I use to assure no side effects for some clients' scripts, or at least some method to help them should an issue arise?
So when you setup a new server, what should I do. I will only be running 1 site for now (vbulletin forum site), should I just install Apache, MySQL, Php, setup the DNS, etc.
Or Should I just Install Plesk, and let that do it.
Most Likely will just be running a 2.53Ghz Core2Duo, 4GB 250GB. I have setup a webserver before just basically though but think I could manage. I think that Plesk would make it easier but would also eat up resources, on the other hand though not having it would use less resources but require more configuration.
I want to setup a dedicated within my home based business, what is the easiest and cheapest way to do this, I understand I would need a static Ip address from my Internet provider (is that right?) also Do i need a spare PC to do this or can I run my main PC and still be able to run it when it's switched off?
setup FreeBSD 7.2 amd64 on my dedicated server remotely. There is only problem I havnt access to KVM, but I have access to rescue system (linux image loaded into memory of the server, which enables me to perform any actions with help of linux tools on hard drive, it's easy to install any linux distro on the server - just format hdd and load files of OS, but I really dont know how to install FreeBSD by this way).
So, maybe someone can help me? If you have any tools for FreeBSD install or special images of it -
I'm trying to help out a friend with a dedicated server setup however we both don't know too much about it. We've setup apache, perl, sql all the standard stuff but cannot for the life of us setup a CRON job for a particular script.
The dedicated server control panel is: WHM Accelerated.
Our current websites have been setup on the server under the same user account (master).
There doesn't seem to be the usual "CPANEL" options which you usually get with shared hosting however.
I would like to asking help about building dedicated server 2x hdd, i have person who advance in this but i want to get open wider suggestion from you :
1. which one better, "use 1 hdd for data and 1 hdd for backup" or "2 hdd for data and use backup service which is extra money"?
2. I have market already, but for starter is 80gb 2x hdd or 73gb scsi (little bit different in price) still enough until next year. I will expect to have 250Gb/500Gb sata, is it better make these new capacity replace the old one or just added into the box using raid?
3. if it is raid, is it no problem using two different ide/sata hdd and scsi hdd?
I am seeking a little input from others who use multi-CPU machines with large memory as web servers and mysql servers.
I will be more than happy to give additional information I might have overlooked if you need it. Just ask.
We are starting to run more and more dedicated hosts running joomla applications. I've been trying to find the very best settings for both performance and security that I can for the servers to function well specifically with their joomla applications.
Serves are not used for *anything* else at all.
The servers are strictly used to serve up web pages. No need for anything other than what apache/php, joomla requires and a few other things such as ffmpeg, etc.
I would like to remove all tools which aren't needed for such a server, leaving a bare minimum server which is less susceptible to hacking.
I've never messed with the root account so wonder if I can simply not allow any access as root other than terminal, perhaps not even su by giving another account full root access and of course, while allowing the system to continue to function properly with the many things which must run as root.
I would like to do this on all of my public machines which are of course behind firewalls. I also have load balancers and cache devices in front of the web servers but at this time, they are not activated so aren't in the realm of this question.
Development is done in a separate environment and the data is pushed to the web server via private network to the web servers. This means no need for shared tools, FTP, or anything else which users would need in a shared environment.
The servers are 8-way IBM, running linux and apache, php/APC. Servers have 32GB of memory and I can install up to 64GB.
Databases are run on separate machines which are also dedicated only to running mysql databases. Same machines as above.
Machines all run multiple network cards bonded as a single IP.
So, my questions are;
How can I best utilize my hardware to take advantage of their memory capacities.
For example, on the web servers, I'd like to find the best settings for httpd.conf which takes advantage of the machines resources.
On MySQL servers, I'd like to do the same as the above, taking the best advantage of the hardware/memory.
For web serving and for joomla, I seek the very best security settings I can possibly get. I say best because since they aren't used by users, there is no need to have a lot of tools and access to these machines so it should not be a problem to tighten these machines up a great deal.
Any input from those who have such experiences would be very welcome as I've been finding no one place for help on this.
I am a good systems administrator but I have never setup a windows web server. Are there any tutorials out on the web that would show me how to do it. Is it true when a dedicated server is purchased the only thing I have to do is transfer the htm or asp files?
I have learnt it is harder to setup than I initially expected (since I have just moved from a shared hosting service). I am in need of some help setting up my DNS servers, as I am very confused. Here is most of the info I know:
1) I am running HyperVM
2) I've installed LXAdmin
3) I own the domain (purchased from xeodomains.com) runemart.com
4) My VPS hostname is: vps.runemart.com
5) I know my IP
6) My host has said:
'For VPS customers that have a HyperVM login you can now host forward DNS on the DNS servers rdns1.vaserv.com (US)rdns2.vaserv.com (UK'
And I am unsure what this means/how to do it.
I am not sure if I need some more information to set up my DNS, however I am sure that I can get it if I do.
Now, my questions begin. Firstly, I need to point my domain - runemart.com - somewhere. I believe I need to set up my DNS via HyperVM or LXAdmin so that they are something like: ns1.runemart.com and ns2.runemart.com. Though, is this correct? Am I able to set up my own actual domain name servers, or will my domain have to point at something like rdns2.vaserv.com?
If anyone can assist me in this I would be very greatful, as I am waiting to get my website running. This is all I will ask for now, I will take it one step at a time =).
I've trawled the sitepoint forums but haven't found anything relating to this subject. I'm hoping someone out there has found themselves in a similar situation.
As a brief summary, I work as a full time web designer for a company but also run my own web design business in my spare time. Within the next year I plan to go freelance which will hopefully leave with some spare time to learn dynamic web design as well as offer clients domain registration and hosting services.
As a web designer, my knowledge of hosting is not that great, but I intend to learn. Currently, I work with a guy who sorts all this out for me. He has a shared server and pays a certain amount per month and charges me £XX a year per client to setup domains and hosting.
I was wondering how much technical skill I need to set this up myself. With so many hosting packages out there, it's hard to know where to start. Should I buy a dedicated server and host my clients at home or go with the safer option and pay monthly for shared hosting?
I would really appreciate some advice about changing from a VPS to a dedicated server and getting a good 24/7 server management service
I know I need more Ram than I’ve got now and I know I need a managed server. Beyond that I’m not sure what I need and all the info I’m reading is making me more uncertain and more worried about making the wrong decision.
I moved from shared hosting to VPS a year ago. I have now started to outgrow the VPS.
The VPS has 512 MB Ram, 10% Burstable Resources. The site has been up since the last crash for 78 days but it is maxing out the Ram during the busy parts of the day and has high load averages.
There is one site on the VPS with static HTML pages. Last month’s figures were approximately 186,000 MB of Data transfer and 4,362000 page views. Average of 30,000 visitors per day
I want to add another 4 or 5 sites small sites. Some of those will be XML feed sites. No forums, chat or reselling.
So what to choose?
1.Operating System CentOS or Fedora Core Linux 6 2.Control Panel cPanel 11 or Parallels Pro 3.Processor Single Core or Dual Core 4.Ram 1GB or 2GB 5.Hard Drive Single with backup, RAID or RAID with backup drive
Server Management Services and Monitoring 24/7 I’m using WebSite Pulse for monitoring at the moment and I’m very happy with them but they don’t do server management. I need a company to secure, protect, update and keep the server running 24/7
platinumservermanagement.com seem to offer a good service for only $29 per month. Don’t know what they are like. They only manage cPanel, don’t know if that’s a good thing or a bad thing. Would appreciate other suggestions.
Basically I’ve got to decide do I stick with current hosting service and move to a dedicated server choosing from the options I have listed or move to another hosting service offering managed VPS with more resources like wiredtree.com. Don’t know what Wired Tree is like just read about them in the forum.
I am currently researching and evaluating Network Attached Storage systems and was wondering whether anyone out there has had previous experiences (good or bad) with any particular setup?
I am particularly curious to know:
1- what kind of a performance hit I can expect when data is stored on a NAS and accessed via ethernet over iSCSI as opposed to regular SATA or SCSI.
2- what pre-built NAS system would you recommend for a system that requires about 8 TB of disk space for file data and needs to have 100% uptime? I've been looking at: [url]
However I don't know what sort of limitations this hardware offers as far as simultaneous disk reads/writes go.
I need to setup a vpn for a customer so they can access a development server. I'm running a Tomcat server and an Oracle database that they would need access to, both port 80(or 8080) and port 1521. This needs to be secured as there is customer data that needs to be protected.
This server will be part of our existing servers we rent from Pacificrack. I really would appreciate any suggestions as the best way to do this, short of buying my own cisco or checkpoint firewall with vpn.
I am currently using windows server 2008 standard to host my website. I set my website up with IIS and when i type in localhost i can see it. But, if i type i my ip adress I see my router's config page. I use dyn dns updater which takes my ip adress and uses that to update my website. But, when I go to my website I see my routers config page, not my website.
Hello I have my own web server. Due to some sites being blocked in where I currently reside (no not porn, just websites like flickr, orkut..etc). I have seen some programs that you can download for free and they connect through a VPN but dramatically slow down your connection and filled with ads. It did work. However I want my own setup and VPN
We are currently setting up a VPS server, which will be used for a specific client portfolio that we are aquiring from another company. This is a Linux based server with WHM/Cpanel.
However, we wish to set up DNS in the best possible way, since we need to host DNS for some vital ISP services also. I gather this probably means using a combination of DNS on the VPS server itself, as well as one or more other DNS servers in other physical locations. The VPS server itself is located in Amsterdam, while most clients are here in Norway - thus ensuring reliability for local clients is the most important consideration.
Now some key questions:
- How important is the physical location of the DNS servers, and where should these ideally be located?
- Is a cluster solution the way to go - and is this supported by WHM/Cpanel?
- We have Linux and Windows based servers on our local network; could these be used for DNS also? If so, tips on software needed?
i am currently experimenting DNS with my 2 ips (each with separate servers spread over 2 geographic locations) and my zone file maps these IPs to ns1.domain.com and ns2.domain.com.
Both of my servers run DNS and with zone entry for my domain name. But when i stop the dns server on first IP (ns1) the second dns server (ip2) not working or resolving. Both are master servers.
My question is if first server DNS fails, the second DNS should resolve? why it is not working. i guess that is reason why domain registrars ask for 2 name servers. if one fails other works as backup??
how do i setup these? should i setup a slave or something?
cpanel / whm shared and reseller accounts (300+ domains) secure only ports for cpanel/whm/webmail
Problem:
Seems like too often people get blocked out of firewall for ftp, webmail, pop3 or webmail. I'm not sure what to do without sacrificing good security measures.
Below is my configuration for CSF (chirpy's firewall)
Code: ############################################################################### # Copyright 2006, Way to the Web Limited # URL: http://www.waytotheweb.com # Email: sales@waytotheweb.com ###############################################################################
# Testing flag - enables a CRON job that clears iptables incase of # configuration problems when you start csf. This should be enabled until you # are sure that the firewall works - i.e. incase you get locked out of your # server! Then do remember to set it to 0 and restart csf when you're sure # everything is OK. Stopping csf will remove the line from /etc/crontab TESTING = "0"
# The interval for the crontab in minutes. Since this uses the system clock the # CRON job will run at the interval past the hour and not from when you issue # the start command. Therefore an interval of 5 minutes means the firewall # will be cleared in 0-5 minutes from the firewall start TESTING_INTERVAL = "5"
# Enabling auto updates creates a cron job called /etc/cron.d/csf_update which # runs once per day to see if there is an update to csf+lfd and upgrades if # available and restarts csf and lfd. Updates do not overwrite configuration # files or email templates. An email will be sent to the root account if an # update is performed AUTO_UPDATES = "0"
# Ethernet device setting is taken from the shared IP address in # /etc/wwwacct.conf but can be overridden here (e.g. "eth0") # # If you have multiple ethernet NICs that you want to apply all rules to, then # you can set the following to the interface name immediately followed by a # plus sign. For example, eth+ will apply all rules to eth0, eth1, etc ETH_DEVICE = ""
# Unfiltered ethernet devices in a comma separated list (e.g "eth1,eth2") ETH_DEVICE_SKIP = ""
# Lists of ports in the following comma separated lists can be added using a # colon (e.g. 30000:35000).
# Allow outgoing UDP ports # To allow outgoing traceroute add 33434:33523 to this list UDP_OUT = "20,21,53,113,123,873,953,6277"
# Allow incoming PING ICMP_IN = "1"
# Allow outgoing PING ICMP_OUT = "1"
# Block outgoing SMTP except for root, exim and mailman (forces scripts/users # to use the exim/sendmail binary instead of sockets access). This replaces the # protection as WHM > Tweak Settings > SMTP Tweaks. This will block hosting # clients from using your server as an SMTP relay SMTP_BLOCK = "0"
# If SMTP_BLOCK is enabled but you want to allow local connections to port 25 # on the server (e.g. for web scripts) then enable this option too SMTP_ALLOWLOCAL = "0"
# If this is a MONOLITHIC kernel (i.e. it has no LKM support, e.g. a VPS) then # set this to 1. Because of the nature of monolithic kernels, it's not easy to # determine which modules have been built-in, so some functionality may not be # available and this firewall script may not work. # # One example is if the ip_conntrack and ip_conntrack_ftp iptables kernel # modules are not available. If this happens, FTP passive mode (PASV) won't # work. In such circumstances you will have to open a hole in your firewall and # configure the FTP daemon to use that same hole. For example, with pure-ftpd # you could add the port range 30000:35000 to TCP_IN and add the following line # to /etc/pure-ftpd.conf (without the leading #): # PassivePortRange30000 35000 # Then restart pure-ftpd and csf and passive FTP should then work MONOLITHIC_KERNEL = "0"
# Enable logging of dropped connections to blocked ports to syslog, usually # /var/log/messages DROP_LOGGING = "1"
# Enable logging of dropped connections to blocked IP addresses in csf.deny or # by lfd with temporary connection tracking blocks DROP_IP_LOGGING = "0"
# Only log reserved port dropped connections (0:1023). Useful since you're not # usually bothered about ephemeral port drops DROP_ONLYRES = "0"
# Commonly blocked ports that you do not want logging as they tend to just fill # up the log file. These ports are specifically blocked (applied to TCP and UDP # protocols) for incoming connections DROP_NOLOG = "67,68,111,113,135:139,445,513,520,1026,1027,1234,1433,1434,1524,3127"
# Enable packet filtering for unwanted or illegal packets PACKET_FILTER = "1"
# Log packets dropped by the packet filtering option PACKET_FILTER. This will # show packet drops that iptables has deemed INVALID (i.e. there is no # established TCP connection in the state table), or if the TCP flags in the # packet are out of sequence in the protocol exchange. # # If you see packets being dropped that you would rather allow then disable the # PACKET_FILTER option above by setting it to "0" DROP_PF_LOGGING = "0"
# Enable verbose output of iptables commands VERBOSE = "1"
# If you wish to allow access from dynamic DNS records (for example if your IP # address changes whenever you connect to the internet but you have a dedicated # dynamic DNS record from the likes of dyndns.org) then you can list the FQDN # records in csf.dyndns and then set the following to the number of seconds to # poll for a change in the IP address. If the IP address has changed iptables # will be updated. # # A setting of 600 would check for IP updates every 10 minutes. Set the value # to 0 to disable the feature DYNDNS = "0"
# If you wish to allow access from all IP's that have authenticated using POP # before SMTP (i.e. are valid clients) then you can whitelist them using this # option which checks for IP addresses in /etc/relayhosts which last for 30 # minutes in that file after a successful POP authentication # # A setting of 60 would update IP's every 1 minute. Set the value # to 0 to disable the feature RELAYHOSTS = "0"
# Enable this option if you want to allow incoming connections from reserved # ports. Normally, only DNS connections have the same SRC and DST port (53) # and any other connections should have a SRC port > 1023. On *nix systems this # rule is generally adhered to and reserved ports are not allocated as SRC # ports. However, other notable OS's appear to ignore this and allocate them at # will. This means it's possible that users may come in on reserved ports, so # enable this option if you want to allow them to, or disable it if you want to # be strict ALLOW_RES_PORTS = "1"
# Limit the number of IP's kept in the /etc/csf/csf.deny file. This can be # important as a large number of IP addresses create a large number of iptables # rules (4 times the number of IP's) which can cause problems on some systems # where either the the number of iptables entries has been limited (esp VPS's) # or where resources are limited. This can result in slow network performance, # or, in the case of iptables entry limits, can prevent your server from # booting as not all the required iptables chain settings will be correctly # configured. The value set here is the maximum number of IPs/CIDRs allowed # if the limit is reached, the entries will be rotated so that the oldest # entries (i.e. the ones at the top) will be removed and the latest is added. # The limit is only checked when using csf -d (which is what lfd also uses) # Set to 0 to disable limiting DENY_IP_LIMIT = "100"
initial WHM DNS setup i tryed at first with whm but it seems like it messes the nameservers IPs so i just put some entries manually I got all name servers IPs and shared IP setup right but i may be have some problems with DNS zones here is my named config
--------------------------------------------------------------------------- view "internal" { /* This view will contain zones you want to serve only to "internal" clients that connect via your directly attached LAN interfaces - "localnets" . */ match-clients { localnets; }; match-destinations { localnets; }; recursion yes;
zone "." IN { type hint; file "/var/named/named.ca"; };
// include "/var/named/named.rfc1912.zones"; // you should not serve your rfc1912 names to non-localhost clients.
// These are your "authoritative" internal zones, and would probably // also be included in the "localhost_resolver" view above :
zone "ns1.xxx.com" { type master; file "/var/named/ns1.xxx.com.db"; };
zone "ns2.xxx.com" { type master; file "/var/named/ns2.xxx.com.db"; };
zone "main.xxx.com" { type master; file "/var/named/main.xxx.com.db"; };
zone "xxx.com" { type master; file "/var/named/xxx.com.db"; }; };
view "external" { /* This view will contain zones you want to serve only to "external" clients * that have addresses that are not on your directly attached LAN interface subnets: */ match-clients { !localnets; !localhost; }; match-destinations { !localnets; !localhost; };
recursion no; // you'd probably want to deny recursion to external clients, so you don't // end up providing free DNS service to all takers
// all views must contain the root hints zone: zone "." IN { type hint; file "/var/named/named.ca"; };
// These are your "authoritative" external zones, and would probably // contain entries for just your web and mail servers:
// BEGIN external zone entries
zone "main.xxx.com" { type master; file "/var/named/main.xxx.com.db"; };
zone "xxx.com" { type master; file "/var/named/xxx.com.db"; }; };
-------------------------------------------------------------------------- main.xxx.com is my hostname I still can't ping main.xxx.com or xxx.com but my name servers are ok what exactly the problem?
i 've tried to setup dns server. i configured dns as well. but it's not reachable by the domain. would you help me to setup this dns settings correctly. will my nameservers would be NS1.mydomain.net and ns2.mydomain.net if i set it up in windows server 2003? i can't login through ftp programs. even when i type my login details. how to change the permission on the server.
Does anyone know of a tutorial that can teach me to setup a dns on my windows server for apache so instead of using an ip address i can use a domain and it would go to my website.
I am trying to run my first PHP 5 application that I bought from SitePoint called "Using Ajax with your web applications" but am having lots of problems trying to configure it to run on Windows XP and IIS.
I have installed Apache2.2 and PHP php-5.2.3-win32-installer.msi
I have made some changes and the last error message I got yesterday was this:
No input file specified.
I have tried to set the doc_root path in the .ini file to C:inetpub/wwwroot/finance/www and also delete it as I saw in some forums but to no avail.
I have set my IIS alias to the "www" folder since it contains the index.php file. It also contains another file I do not know what it is used for (.htaccess) and I left it alone.
[url]
Today, when I tried to open the file again in IE,
[url]
I got the following error:
Internal Server Error The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, claudiop@kmrsoftware.com and inform them of the time the error occurred, and anything you might have done that may have caused the error.
More information about this error may be available in the server error log.
I would appreciate very much if someone could help me to sort this problem out. What do I have to do to get the server back and running and get it to work with this PHP application?
I am having some trouble correctly setting up IIS 7 on Vista Business.
I have used the standard resources and web casts from Microsoft to get IIS set up to run asp/asp.net applications. When I run them from the localhost they run perfectly and everything seems to be fine. What I am having trouble with is editing and updating websites based in the inetpub>wwwroot folder.
I keep getting security messages and am unable to save edited file directly from studio.
Is there a plain English (yes I am new to server management) tutorial to getting IIS 7 to work fully so that I can develop ASP.NET applications at home.
