Register a SA Forums Account here!
JOINING THE SA FORUMS WILL REMOVE THIS BIG AD, THE ANNOYING UNDERLINED ADS, AND STUPID INTERSTITIAL ADS!!!

You can: log in, read the tech support FAQ, or request your lost password. This dumb message (and those ads) will appear on every screen until you register! Get rid of this crap by registering your own SA Forums Account and joining roughly 150,000 Goons, for the one-time price of $9.95! We charge money because it costs us money per month for bills, and since we don't believe in showing ads to our users, we try to make the money back through forum registrations.
 
  • Post
  • Reply
JHVH-1
Jun 28, 2002
I work at http://www.choopa.com
We do mostly managed servers, and mostly adult sites. A lot of porno tube streaming video applications, and that kind of thing.

We don't do CPanel virtual accounts anymore, but if you want to run your own CPanel server we sell it as an add-on.

We also run http://unmeteredservers.com for unmanaged customers who want a capped speed port and not worry about how 95th percentile or transfer per month.

I don't suspect a lot of people here to be that interested as we aren't a goon priced type of place that sells hosting for $10/month.

Adbot
ADBOT LOVES YOU

JHVH-1
Jun 28, 2002

Bob Morales posted:

Do you guys run the choopa.net EFnet server too?

Yep. The last I remember it runs off its own fiber so its not part of our normal network. Our president and one of the network admins have run it for a long time. I believe they have a canadian server out of our montreal location as well.

JHVH-1
Jun 28, 2002
You can set a user's php to only work in their home directory and /tmp/ so they can't even do anything with php outside of the directory. Usually this is part of the suphp setup on something like cpanel. You can also limit functions by disabling certain ones if you want to be even more restrictive.

JHVH-1
Jun 28, 2002

Bob Morales posted:

Apache 1.x

What hosts still use it? I know GoDaddy and 1&1 do, but do who else?

Do you require it? Most stuff will work with Apache 2, the main thing I ran into migrating customers over is the format if their rewrites in .htaccess. Once it was reformatted for Apache 2.0 everything performs a lot better than the older version.

JHVH-1
Jun 28, 2002

Fangs404 posted:

It is indeed working. Documentation on how to setup suphp sucks, but http://www.pc-freak.net/blog/installing-suphp-on-debian-lenny-5-04-with-apache-2-2-9-2/ helped a lot. If you get an internal server error, know that you need to play around with the docroot and check_vhost_docroot settings in suphp.conf.

[edit]
I read that suphp runs about 25% slower than mod_php, so I decided to try to find a better solution without using suphp. Here's what I found:

WordPress has some suggestions for permissions. The important part is this:


This alone, at least for me, wasn't quite enough to do the trick. What I discovered is that apparently WordPress checks to see if you are the user trying to write the files. Because the web user (in my case, www-data) is not the same as the owner of the files, it fails. It fails even if permissions are 777. The way to get beyond this is to add this line to your wp-config.php:

php:
<?
define('FS_METHOD', 'direct');?>
This indeed did the trick. So basically, add that line to your wp-config.php, and 644 all files and 755 all folders in your wordpress directory:

code:
find wordpress/ -type f -exec chmod 644 {} \;
find wordpress/ -type d -exec chmod 755 {} \;
Then change the group ownership of whatever directories you need write access to and give the group write access:

code:
chgrp www-data wp-content/
You'll also need to do wp-content/plugins, wp-content/themes, and any other directories that WP may need write access to. On this same set of directories where you're changing the group, you also need to change the group permissions to allow write access:

code:
chmod g+w wp-content/
What some guys also recommend is simply leaving the user and group alone until you need to upgrade, and then doing this:

code:
chown -R www-data:www-data wordpress/
Do the upgrade, and when the upgrade is done, change the user back to what it was before. Kind of a pain, but it works.

[edit2]
Just wrote about this in much more detail on my site. This should clarify things.

http://www.fangsoft.net/?p=227

The point of suphp is that you can isolate users to their sites, and they can only read/write their own files. If you chown it to the user that the web server uses like that then if you have another site and an exploit is able to put any kind of php code on the system it will be able to also modify those files. Its a big help on an environment like cpanel where you are giving accounts to other people and running various websites with code packages you don't have control over. If someone leaves their Joomla out of date or runs crappy scripts that require modifying files a lot it keeps it from spreading elsewhere and getting code injected into all your sites (and thus getting flagged by google).

Another option: add mod_security and set that up with a good ruleset. That will protect the heck out of your site, even if the code stinks and keeps a log.

If you want wordpress performance you run a caching plugin (w3 total cache is my favorite) and combine it with memcache and/or the php apc module.

JHVH-1
Jun 28, 2002

Fangs404 posted:

I understand what suphp does. I think you misunderstood my point. I expressly state that chowning is a very bad solution (read my blog entry). The solution I came up with (selectively chgrping just a few directories) is better than chowning everything (more secure) and better than suphp (much faster).

Most php scripts I use don't actually modify files/directories. They simply edit a database. My WP blog is the exception to that. I don't want/need suphp for every php site I run.

Just wanted to point out that while its more secure there still would exist a problem if there was a hole in the code somewhere. A lot of worms will use access to a directory to place a file in it, run a script and then you end up with all kinds of junk from it scanning the system, placing stuff in places like /tmp/ etc.

Using mod_security fights against it, but if you are just doing one WP blog and keep it up to date I wouldn't worry.

JHVH-1
Jun 28, 2002
If you install CSF it integrates with cPanel and lets you block/whitelist addresses from WHM and do other stuff like rate limiting, brute force intrusion detection etc:
http://www.configserver.com/cp/csf.html

Sometimes you have to tweak it to fit your needs but overall it works pretty well.

JHVH-1
Jun 28, 2002

sholin posted:

It's some A records, and an MX record, that should not take 15 minutes, in fact if the domain name is supplied when the account is made, it could be entirely automated when the zone is created.

The most configuration I had to do with my Google Apps for Domains was make myself an account.

Don't you have to add the google apps key to show you are the owner of the domain as well? I deal with customers every day and some people are clueless so its not completely ridiculous. Just because its obvious to you doesn't mean everyone wants to be bothered with or can grasp how some of this stuff even works.

JHVH-1
Jun 28, 2002
Namecheap also has its own dyndns service which is nice. You can make any domain or subdomain into a dynamic dns host.

JHVH-1
Jun 28, 2002

Ditch posted:

I bought webhosting from HostHOP a few weeks back. I was used to shared/reseller hosting and have no experience with server management. Somehow I messed up the DNS stuff and the websites are often unavailable despite zero server downtime (and I can always access WHM). Not sure what I did wrong! Where do I even start?

Are you hosting your own DNS for your server on the same machine where the domain is hosted?

What I see sometimes is people point the registrar info to server IPs on the server but they forget to do things like configure the ns1/ns2 domain records. CPanel by default will listen on all IPs, but if the records are wrong or don't exist then it won't work.

So see what is in your whois for the domains and try to ping that. If you can't resolve your name servers then that would be the root problem. What I would generally recommend is having one main domain so use something like whm.mydomain.com for your hostname, and set up ns1.mydomain.com and ns2.mydomain.com using an outside DNS server and point it to the correct address there. Then use that domain to control the dns for the rest of the stuff.

This can be useful to debug what an outside server is seeing:
http://www.opendns.com/support/cache/

Also using dig and query the server directly to make sure its starting (like you actually have BIND running and available).

JHVH-1
Jun 28, 2002

Pram posted:

I wish it was that easy, but I was told that thing doesn't work with plesk on windows by cPanel support.

Don't think there is any easy way around that. It works fine on Linux servers if you can get root ssh access to for the Plesk machine.

Create the accounts, rsync the html directory, create the databases, which in cpanel by default normally start with username_

I have one in my admin queue now to move a FreeBSD machine originally from 2006 without a control panel over to cpanel. Will be fun fun fun.

JHVH-1
Jun 28, 2002

Rufo posted:

http://www.namecheap.com

http://www.namecheap.com?aff=6237 if you're feeling generous (thanks)

Also coupon code ELEPHANTS for 88 cents off http://www.retailmenot.com/view/namecheap.com

JHVH-1
Jun 28, 2002
Just because it is possible doesn't mean it is going to be easy, and keeping this separate where possible is usually a nice thing to have.

Like Friday for example, Directnic had a DDOS attack on their site and DNS servers. One of my customers was using them for registrar and DNS management so his whole site was down, and he couldn't log in to get or update records.

JHVH-1
Jun 28, 2002
That might be the case. It might depend on how the mail server is set up as far as filtering etc. some of which you would have to look at the logs to see what is really going on.

Theres a delivery route tool in cpanel:
http://docs.cpanel.net/twiki/bin/view/AllDocumentation/CpanelDocs/DeliveryRoute
But I don't know if that would help as it its for mail leaving the server not coming to it.

JHVH-1
Jun 28, 2002
You can install dstat and look where the red values are to see your bottleneck. Install sysstat so you can have sar polling and then you can get historical information.

JHVH-1
Jun 28, 2002

Biowarfare posted:

one of the guys on LEB did DNS hosting for his personal site... with 32 nameservers

Hey you need failover right?

JHVH-1
Jun 28, 2002
One of our sites has 10Mbps unmetered for $89 and second month free:

http://unmeteredservers.com/

Plus dual 500GB (can configure it RAID-1) and 4GB ram in that package.

EDIT: err, never mind that says 100Mbps on your quote, that would be an extra $80 but its unmetered so no limit on transfer.

JHVH-1
Jun 28, 2002

eightysixed posted:

http://www.seohosting.com/

Run by the guys at HostGator.

This is pretty funny. I am sharing it with my co-workers. We always get these guys who subscribe to this SEO crap asking for multiple class C IPs on their dedicated server, but we can't do it because of ARIN rules. I guess hostgator just has a ton of them on a machine and shares the blocks between multiple people.

JHVH-1
Jun 28, 2002

Biowarfare posted:

online.net - shared unmetered, not too loaded because they only sell to one country, only payable via local (france) direct debit from bank. mostly peering though
ovh - i wouldn't
100tb - if cdn/torrent/filehosting, i wouldn't
choopa/unmserv - ?
redstation - if cdn/torrent/filehosting, i wouldn't
incero - ask if they have any of the 200bux 100TB/m
swiftway - ask if they have any 100m specials in stock should be $150 or so (maybe less)

We have fileserve.com on the choopa network. So that is OK as long as you process DMCA requests in a timely manner. If you want to do torrents or whatever, that won't fly for long if we get reports.

JHVH-1
Jun 28, 2002

hayden. posted:

Not exactly hosting, but does anyone have a paid proxy service they'd recommend? I have a friend in Africa for a few months who wants to use her Netflix. Any idea how well it would work for that assuming her bandwidth in Africa is plenty?

My company has this service now if you don't want to be hassled with setting it up and managing it: http://powervpn.com/

JHVH-1
Jun 28, 2002

hayden. posted:

Bought this and set it up, seems to work well. Thanks!

edit: digging in the terms of service say it's limited to 500MB a day, which seems pretty low considering you advertise it specifically for HD streaming websites.

drat, sorry. I didn't know they put that in there. I wonder if it is strictly enforced or they put that in so they can remove people who abuse it a lot. I'm not really involved with that project, so I haven't really tested it.

JHVH-1
Jun 28, 2002

Biowarfare posted:

Hey, you're with choopa right? Any chance you could point me to any customers that sell "budget" xen/kvm/vmware VM's in your NJ facility or is that a violation of privacy policy or something?

I honestly don't know any off hand. I haven't worked out of the location the servers are in for a few years.

This guy is on our network though I believe http://www.bbvps.com/
Never used his services so I can't say if they are good or not.

JHVH-1
Jun 28, 2002

Surmy posted:

I'm also considering moving hosting as my current host is quite useless as far as their customer support goes. How much is moving hosts going to hurt my search ranking? Is there anything I can do to mitigate this?

Thanks for the help

My suggestion is to find your new host first. Grab a backup of the data just in case which is nice to have anyway. Some hosts help migrate a site over. Either way get it all set up and working on the new machine. When you get the new hosting you can edit your hosts file (or on windows I use this handy thing http://www.abelhadigital.com/hostsman ). That way you can test it and make sure everything works. When you are happy you change the DNS over to point to the new domain. As long as the domain loads for everyone you probably won't see much of a hit in search rankings. You keep the old server up till the bandwidth tapers off and everyone's DNS is updated to the new one.

So in your case you might want to see if you can get the domain transferred to a different registrar before you do any of this.

I have seen people cancel their current hosting and then rush the migration process and end up with all kinds of little things untested or the old host cutting off transfer mid way. They might pick up on a bunch of bandwidth suddenly and check where its going to. Each host is different so it is best to plan for things to not go as planned just in case.

Maybe if it would work for your site, maybe sign up for https://www.cloudflare.com/ or something so the content is on a 3rd party. They are supposed to make your site still load from their servers if its down, but it requires pointing the DNS there.

JHVH-1
Jun 28, 2002
Bringing the TTL down as mention is also helpful. Lower it, and wait long enough so the old one expires. Then the switch goes faster, and if you need to switch back you won't be out of luck as long.

Handy sites for checking DNS:

OpenDNS cache check: http://www.opendns.com/support/cache/
http://www.intodns.com/
http://dnscheck.pingdom.com/

I think seeing if you can get control over your own DNS would be the first step while you are shopping around for new hosts.

JHVH-1
Jun 28, 2002
Turn KeepAlive Off, they won't help. They just hold open a thread waiting for new replies. 150 is not very high, but I guess it depends on your specs. Each time somebody connects to the site it needs to connect for each image on there.

Suggestion about wordpress is to install memcache, install memcache php module, install w3 total cache instead of what you have and configure it to use memcache for database, page caching etc.

Download http://mysqltuner.pl and run that to get suggestions about database, but if you cache database in memcache it will bring down load a lot.

ALSO: Also you can disable all plugins and only enable what you need one by one. There may be a particular plugin dragging things down. You can use mytop or 'watch mysqladmin processlist' to keep an eye on queries to see what is going on.

JHVH-1
Jun 28, 2002
Wordpress is a bit of a hog, especially when each call to index.php calls the plugins which make their own database calls. Caching database in memcache, apc or even using the disk method in w3 total cache (which requires no server changes) will help. Since your disk I/O doesn't seem to be taking a hit at all, that might work out.

Also adding a CDN like MaxCDN if you can swing it, or give the free cloudflare a try:
http://blog.cloudflare.com/w3-total-cache-w3tc-total-cloudflare-integrat

You can also use ETags to set client side caching.

I'm used to having more memory to work with when I tune these things. We host a few larger blogs, but end up load balancing, or using varnish cache and they have dedicated servers.

JHVH-1
Jun 28, 2002
W3 super cache is the bomb. They even have a set of nginx rules if you ever move to that. Caching common mysql queries and other stuff cuts down on cpu, and makes mysql use a lot less memory.

JHVH-1
Jun 28, 2002

Biowarfare posted:

Whole point of colo is to have it near you/be able to fix things yourself too, otherwise enjoy paying remote hands/eyes

An option to get around that is to get a server with iLo/DRAC/IPMI though and have full control and be able to load disk images for reinstall/repair.

JHVH-1
Jun 28, 2002

Biowarfare posted:

They tend to be behind on updates (randomly went into two shared accounts at two hosts to check, fantastico is offering an old version of WP), and people installing them won't know to actually update, so after the initial install it'll end up being an old version if it wasn't already

Might depend on which version of PHP they are running. Wordpress 2.8 and earlier work on PHP 5.1, but higher won't, and 3.3 won't work on 5.3. But you also can't just upgrade wordpress willy nilly on people who install it. Plugins break, update scripts have to be run etc.

JHVH-1
Jun 28, 2002
Its a shared environment, so if something got in it probably just stuck index.php everywhere it could write to. I have seen it happen once before. Could be something dumb like a version of php or apache that was never updated, or an older cpanel release still running (it is supposed to auto update but there are different options for that) and someone has an outdated copy of joomla or phpmyadmin they installed manually who any number of things.

There is plenty of nasty stuff out there and it is hard to be 100% secure all the time when you are running a shared server and customers want to run a grab bag of applications.

JHVH-1
Jun 28, 2002

jackpot posted:

I'm seriously thinking of opening a business where all I do is offer to renew peoples' Godaddy (and Network Solutions) domains. People will laugh at me...until they try to do it on their own and find themselves at the checkout screen with a $700 bill and a domain that's registered for the next 100 years (private, of course!). I'll make a loving fortune.
:phoneline::phoneline:

My wife's business' site is registered through Hytek. I know, I know - it seemed like a good idea at the time (three years ago). I'd like to move her away from it and to someone else. What scares me (terrifies me) is getting her emails moved at the same time. Thousands of emails, organized into dozens of folders. She uses her domain email, but she runs all of her mail 100% through Gmail.

If you ever hear of a gruesome murder/suicide in Virginia, involving multiple chainsaws and defenestration, it's because I switched her site to a new host and lost all of her old emails.

How do I do this? What steps do I take to change hosting while keeping the old emails? Is this a simple thing that I'm worrying too much over, or is it as big a pain as I'm imagining?

If both hosts are cpanel accounts you could make a backup file for the whole account and then restore it on the other end. Some hosts might help work with you do this. The complete backups include stuff like databases, so you don't have to set them back up on the other end.

If it is just the mail, you can just copy the directory or import it to google mail like mentioned.

JHVH-1
Jun 28, 2002
Thats why I always opt for cpanel's backup archives and copy everything over if both ends are cpanel (or cpanel can import accounts from other systems like plesk if you have WHM access). It will import everything, even the non-important stuff you might overlook or think isn't needed till later.

JHVH-1
Jun 28, 2002

Biowarfare posted:

There are lightweight wikis

Mediawiki is not one of them. It's meant for memcached, clusters, varnish etc.

So then toss memcached on, thats easy.

Nginx + php-fpm + memcached = groovy times.

JHVH-1
Jun 28, 2002
I prefer w3 total cache. It does database caching, object caching, javascript/css minify, supports CDNs and varnish.

JHVH-1
Jun 28, 2002

Mistress Khary posted:

I'm in the process of moving the stuff over, but since my domain was an addon domain they said they didn't support the migration of that. They gave some cryptic details on how I should go about starting to setup (well cryptic to ME, I had no idea what WHM even WAS). So now that's going, and i'm uploading the site via FTP right now (my upload speed sucks!), at which point I believe she said she'd help me restore my databases, so hopefully after that it's not too complicated again!

WHM is like the admin area of cpanel that controls all the accounts. It has a built in migration tool that if you had a cpbackup it would restore the account along with mail, add-on domains, databases all in one easy process.

The add-on domains basically just go in sub-directories of public_html, and then the databases need to be imported and the grant added to allow the login/pass you were using.

JHVH-1
Jun 28, 2002

Kalma posted:

We're not sending emails like that. We are essentially using the email servers as our personal email accounts.. If we do send out a "mass" email, we're talking maybe 20 people. We're just trying to email our friend George and AT&T, or Comcast, or wherever kicks it back to us.

It can happen for different reasons. Some blacklist maintainers are overzealous and will block a whole big range of IPs because of one person sending out a blast of mail for a day or two.

You can use this tool to check which lists you are on:
http://mxtoolbox.com/blacklists.aspx

You can contact your host and have them help get you removed or take care of the problem. If you go through the site of whichever blacklist you are on you can often find the reason they have it listed.

JHVH-1
Jun 28, 2002

Kalma posted:

The problem with that is that we don't show up on any of the blacklists. I sent an email to ping@mxtoolbox.com and then asked it to check blacklists. The first run of 36 lists returned "Ok" on all of them but 1 timeout, and the "Check all Blacklists" returned "Ok" on 107 with 13 time outs.

When I send an email to one of the people I can always count on to return for me and follow the directions to unblock myself, it says I'm not blocked.

I didn't mean to take things off tangent.. I thought it was web/mail hosting based, not IP based... though it happens with two different service providers (with the same mail servers, using outlook)

We've been fighting it for a while and no one can fix it or accept blame.. we usually just end up using a gmail account to send to the people we can't send to with our "real" email.. but that causes trouble when we're trying to find old information.

Have you sent mail to an account like the gmail and then looked at the headers? You can also check the mail log when a message is rejected and it can sometimes help point to where the issue is.

There are some things you can to to improve chances of mail going through to some hosts. Places like hotmail often are more strict in some cases. Like you want to make sure the hostname on your server resolves back to the IP for one. That often will get your mail rejected because it looks like its being bounced off some place. Another help is setting up something like DKIM (domain keys) so it shows in your DNS that you are a verified sender.

If the mail goes through but not to everyone, it is usually something like that.

JHVH-1
Jun 28, 2002

Gism0 posted:

E-Mail delivery is a massive pain in the rear end these days, if you're sending low amounts of email then usually it's better to use a service like mailchimp.

However to do it yourself you just need to set a few things up:

Your IP you use to send mail must have a PTR record pointing to your email server's hostname.
You should set up DKIM in your MTA and DNS records.
You should set up SPF in your DNS records.

You can check these are all working by sending an email to check-auth@verifier.port25.com - they will reply with the result of the tests.

Hotmail uses SenderID which is very similar to SPF, you can set this up as well in your DNS but the easiest way is to just create SPF records and use the form below to register it with hotmail:

https://support.msn.com/eform.aspx?productKey=senderid&page=support_senderid_options_form_byemail&ct=eformts&st=1&wfxredirect=1

You should also sign up for Hotmail SNDS - This shows you details on how Hotmail is handling your E-Mails.

Also sign up for Hotmail's JMRP as well as feedback loops for all other major email providers, these send you an email whenever someone clicks the spam/junk buttons.

After setting these up on a fresh IP with no associated reputation you should be able to deliver to most providers, however many of them will limit the amount of emails you can send per day (Hotmail especially) until your reputation levels rise, which mainly depends on the content of your emails.

If your IP already has bad reputation due to previous abusers then your best bet is to get a brand new IP.

These are good tips. I really hate when we get a customer at work with a complaint like "my mail isn't working". It means running through each step and testing what they hosed up in their mail client, or diagnosing why the mail isn't getting where it should go. Either way one of the most annoying sys admin tasks.

JHVH-1
Jun 28, 2002

orphean posted:

I agree with what you're saying but there is such a thing as managed colocation. I guess I'm just looking at things from a total cost of ownership point of view. It seems spending 90 bucks extra a month for 4 gigs more ram or whatever is less cost effective then just buying it and fedexing it to the colo for them to put in.

What optikalus said makes alot of sense to me. I've worked with tons of customers who have weird stringent policies surrounding a capital expense whereas a service expense can just fly right through.

I wasn't trying to come across as unamanged dedicated servers are for FOOLS :byodood:

I would think it is for the kind of people that are on a crappy VPS or something and want to upgrade but don't want to go all in and invest the kinds of dough it costs to pay for a server all at once. They make X amount of dollars per month off their crappy blog or whatever site, and start getting more traffic so they move to an unmanaged dedicated because a) there is less risk if your traffic doesn't keep up the same rate down the line you can just bail and head back to VPS and b) you want to save a few extra bucks per month by removing managed fees from the equation since you already admin your own server.

If you go for a co-lo you have to invest in a machine, plus the colo plan, and the bandwidth plan. If you outgrow that machine you have to shell out more money for a better one. If you downsize you wasted the money.

I think if your main business isn't from the website that might be different. But a lot of times its just somebody with a side project that does it to earn some extra money.

Adbot
ADBOT LOVES YOU

JHVH-1
Jun 28, 2002

Druuge Fuel posted:

I recently switched to cloud hosting and login to the virtual server with my web browser. This is my first foray into cloud hosting (and windows server 2008) and I'm curious if there's a better method to interface with the virtual desktop. As it stands, the browser interface is laggy and the small window makes the text difficult to read (even after using "CTRL +" to zoom).

My hosting provider is a rather new, start-up in Cincinnati and have very little guides or "how-to's".

Can you just enable RDP and use that?

http://technet.microsoft.com/en-us/library/cc794832(v=ws.10).aspx

(May also need to allow it in the firewall)

  • 1
  • 2
  • 3
  • 4
  • 5
  • Post
  • Reply