Tag Info

Hot answers tagged

26

For me, choosing reputable hosts and doing regular backups - both of which you seem to be doing already - is about as well as you can do without starting to think about business continuity planning, high-availability setups, SLAs, and so on. I tell people that you get 99% uptime for free (ie, without spending anything extra on high availability). That's ...


8

Small businesses with small budgets, especially nonprofits, typically are not going to be able to afford high availability. The question is, if you have virtually no budget, as is commonly the case in situations like this, what is your restore strategy? I do have some clients like this, and this is what I do: First, for some of them I have an incremental ...


7

If you can avoid it, you should not be running the web server processes as the root user, since that means the compromise of any vulnerability in the web service will completely compromise the server. With where you are now, I'd recommend starting from scratch on a new server - the attacker could have given themselves persistent root access through any ...


4

The complexity of the implementation depends on the application stack, but ideally you'd want to setup a "hot standby" (at a different provider), with data being replicated in real-time (or as close to real time) as possible. Making the business case for having 2 "live" servers is as simple as comparing the potential loss of revenue during a "recovery from ...


2

Remember that uptime is not the same as data integrity. You can have 99.99% uptime and have lost all of your data twice in a year as long as the server was restarted "soon enough". Most of the VPS providers are guaranteeing that your server is running, NOT that your data is safe. Your data is Your problem :(. What you're looking for is something that will ...


2

On DigitalOcean (and some other cloud providers; Openstack for example) they're providing metadata on each boot of the machine (either provided via cloud-config or via the options you provided in the DigitalOcean web interface). When you bestowed a name on the droplet/VM you signified to the metadata service that you wanted the hostname to be called that ...


1

The feature you have to use is called NAT. As was stated before, depends on your needs. If you need a different external IP for each VM then go with pool, if not - use NAT and 1 external IP.


1

In spite of all these changes, another user is always able to change files, rename folders, and upload another hacked file. If the parent directory of your web root is owned by the same user who runs the web server, then those parent directory permissions would override any permissions set to child files and directories. For example, open up a ...



Only top voted, non community-wiki answers of a minimum length are eligible