Tag Info

Hot answers tagged

31

Simply put.. HaProxy is the best opensource loadbalancer on the market. Varnish is the best opensource static file cacher on the market. Nginx is the best opensource webserver on the market. (of course this is my and many other peoples opinion) But generally.. not all queries go through the entire stack.. Everything goes through haproxy and ...


15

The additional security surface java puts into your environment is complex, and it's important not to ignore it or try to simplify it away. Firstly, there is the horrible record the JRE has for having security bugs. It's hard to point out a specific one, and this is the scary part - the bugs are overwhelmingly unspecified vulnerabilities with unspecified ...


14

It's true that the 3 tools share common features. Most setups are fine with any combination of 2 among the 3. It depends what their main purpose is. It's common to accept to sacrifice some caching if you know your application server is fast on statics (eg: nginx). It's common to sacrifice some load balancing features if you're going to install tens or ...


14

Your DNS should not change very often in the first place. Many DNS server do not honor your TTL "request" and impose their own policy. If you're going to make a chage, set the TTL lower weeks before the change. Normally having a long TTL helps reduce load on your authoritative server(s) and adds a bit of time to clients accessing your site. I commonly use ...


12

I suggest you reevaluate your reasons for wanting to go the commercial route rather than using an opensource solution such as Squid. Squid is used by many large ISPs worldwide and is quite likely the most mature web cache and proxy available. Apart from the cost benefit of not requiring any license fees, Squid has an active community and hundreds of code ...


12

Depending on your version of chmod, you may be able to do this: chmod -R . ug+rwX,o+rX,o-w Note the capital X. This sets the executable bit on directories and files that already have any of the execute bit already set. Note that you can only use capital X with '+', not '=' or '-'.


12

I have done exactly what you speak of before. I found the industry has a very strong barrier to entry, but here is what I did. Rented a dedicated server with a control panel, in my case Plesk (linux or windows) Bought a domain name to be the "home" of my hosting business The server you buy will likely come with 4-7 IP addresses, you can use these to ...


12

Pros of using a Mac Mini as a server None Cons of using a Mac Mini as a server No redundancy No rackability No hardware battery-backed RAID Not serviceable Non-ECC memory Crap cooling Not built for load Not scalable Poor support under non-Mac operating systems What, then? There are many, many places where you can get dedicated servers for $200 or less ...


12

A domain that serves no cookies. The idea here is that you use a cookie-free domain to serve images, CSS files, scripts and whatnot, so that your users don't waste time and bandwidth transmitting cookies for them. SO uses sstatic.net for the purpose, for example. The main reason the concept is of any note is that most people can't use a subdomain of their ...


12

First, my condolences on your mentor's hospitalization and your baptism by fire into system administration. Second, my condolences on your data loss. I sincerely hope you have backups. To summarize your situation: You have a three-drive RAID array (presumably a RAID-5). This is one "Logical Drive" (the 3 disks are handled by the RAID controller, and ...


11

question 2 It looks like the name servers and actual host for YOGOTAGIFT.COM are registered through ENOM, Inc. The site is hosted at EHOST-SERVICES212.COM. Try sending both spam reports and DMCA takedown notices to eNom and the server host. eNom abuse page is http://www.enom.com/help/abusepolicy.aspx question 4 : Honeytokens Seed your mailing list and ...


11

There are many methods for scaling web applications and the supporting infrastructure. Cal Henderson wrote a good book on the subject called "Building Scalable Web Sites". It was based on his experiences with Flickr. Unless you grow slowly you will run into the same kinds of growth issues many others have seen. Scaling is, like many other subjects, a ...


8

Maybe Gosa will fit... I haven't try it yet but it's on my TODO. From the homepage it says: GOsa² provides a powerful GPL'ed framework for managing accounts and systems in LDAP databases. Using GOsa² allows system administrators to easily manage users and groups, fat and thin clients, applications, phones and faxes, mail distribution lists ...


8

Squid doesn't care what type of system is initiating web traffic, so you can just continue to use Squid, although there is a Windows port if you want to run Squid on Windows for some reason (http://squid.acmeconsulting.it/SquidNT26.html). If you are looking to become a Microsoft shop, then Internet Security and Acceleration Server (more commonly known as ...


8

That is a very intelligent question and a clear cut source of confusion when ops and devs talk. It means different things depending on context, and especially so in a web hosting context. root can as far as I know officially mean at least: the system full access privileges user. the file system base directory, a.k.a. / the web server shared file system ...


7

Have you looked at roundcube?


7

The cause of this problem is that in EU countries (and certain other TLDs outside the USA), nameserver records are typically cached for more than 1 day. SBS2008 has a cap on the maximum time that it will allow nameserver records to be cached, which defaults to 1 day. This default works fine in the USA but When the .uk and .eu records become stale, they are ...


7

It's not quite what you think. Heroku is not serving up multiple SSL certs on a single IP address. If you perform an nslookup against different Hostname SSL deployments, for example, you will find that they each point to a different Amazon ELB. Therein lies the secret sauce. When a customer requests Hostname-based SSL, an ELB is provisioned for them and ...


7

as per uSlackr. It appears that currently both of your name servers are not answering.. qweop.com. 172800 IN NS ns01.000webhost.com. qweop.com. 172800 IN NS ns02.000webhost.com. ;; Received 108 bytes from 192.42.93.30#53(g.gtld-servers.net) in 83 ms ;; connection timed out; no servers could be reached` It probably works for you, since ...


6

SCM-Manager: The easiest way to share and manage your Git, Mercurial and Subversion repositories over http. Very easy installation No need to hack configuration files, SCM-Manager is completely configureable from its Web-Interface No Apache and no database installation is required Central user, group and permission management Out of the ...


6

Well, 1.1.1.1 is an IP address. As far as who it is - it's public address space that bad internet citizens tend to use as a placeholder: inetnum: 1.1.1.0 - 1.1.1.255 netname: Debogon-prefix descr: APNIC Debogon Project descr: APNIC Pty Ltd country: AU admin-c: AR302-AP tech-c: AR302-AP mnt-by: ...


6

Better, shorter, fancier than what ? cd /directory find . -type d -exec chmod 0755 {} + find . -type f -exec chmod 0664 {} +


6

I like Splunk myself, not cheap though.


6

I also looked at this on the Nginx wiki and other blogs and the best way performance wise is to do the following: To redirect from www.example.com to example.com using nginx (version 1.0.12 at time of writing). server { server_name www.example.com; rewrite ^ $scheme://example.com$request_uri permanent; # permanent sends a 301 redirect whereas ...


6

I've had good results from wapiti - it scans your web forms and attempts injections and XSS attacks against them. If you have the time, I'd suggest getting the backtrack distribution - it's a modified ubuntu liveCD that's been loaded up with nikto, wapiti, openVAS (a fork of nessus) and hundreds of other great security audit tools; I've used it in a few ...


6

I would recommend you try to use whatever is going to be used when the application goes into production. From my experience that is probably going to be CentOS if it hasn't been decided yet. For the most part though, if the application is put together intelligently and doesn't need to be closely tied to the system it like won't matter. You will probably ...


6

Anecdote alert From personal experience it's the sites that I don't access very often where I forget my password and have to access the "forgot my password" flow. For sites I access frequently I can remember them. So make sure that the pages are very friendly for the occasional user. So from my small sample of 1 the usage rate would be inversely related ...


6

Seems you did really well so far. Here are a few more hints : 1 What more can I do to make sure that no one got hold of our mailing list or data? Read application log, if any. 2 What more can I do to report and maybe take down the site? Make a whois on their IP adress and contact their ISP( according to comments "get your lawyer to draw up a 'cease ...


6

Java applications eat up all my RAM The alternative to using RAM is wasting RAM. You can't save it for later. Java is full of vulnerabilities That doesn't really matter because you aren't going to expose the JVM to the world. I presume you aren't going to run any hostile programs, and if you are, Java is safer than most other languages. What ...


5

I'm person who receives enjoyment from my car, and knowing how it works, and what everything does. I drive a manual because I enjoy the ability to be able to control the power delivery of the car more accurately, and I love being able to put the back end out with a good push of my right hoof. My wife on the other hand, just wants to get to work and back ...



Only top voted, non community-wiki answers of a minimum length are eligible