VPS Hosting for Speed and Security

mikelittle.org @mikelittlezed1MIKE LITTLE

VPS hosting for speed and security


Mike Little

WordPress specialist

https://mikelittle.org/ @mikelittlezed1

http://mikelittle.me/

http://mikelittle.me/


Intro• Servers

• Application Stack

• Security Pt 1

• Performance

• Security Pt 2

• Other Stuff


Technical but not..


ServerShared vs Dedicated vs VPS vs Cloud


Server

• Shared : - Cheap, low traffic, overloaded

• Dedicated: - Expensive, high traffic, inflexible

• VPS: - Cheap, high traffic, flexible

• Cloud: Cheap/Expensive, ultimate flexibility


Server

• Memory

• CPU

• Storage (SSD)

• Bandwidth

• Location, location, location


Server• Different eggs in different baskets

• Domain Registration

• DNS Hosting

• Site Hosting

• Email Hosting

• Backup Storage


Application StackLinux/CentOS/Ubuntu

LAMP/LEMP/LIMP/LUMP


Application Stack

• Linux

• Ubuntu


LEMP

• Linux

• NginX (“Engine X”)

• MySQL / MariaDB

• PHP (FPM)


Easy Enginehttps://rtcamp.com/easyengine/


SecurityOS and server level security


Security

• Firewall - Block ports

• Fail2Ban - Ban naughty IPs

• Minimise attack surface

• Monitor and Alert

• Backups - OS and configuration - Offsite


Performance


Performance

• Lemp Stack

• Caching

• Page caching x 2

• Memory caching

• DB caching


Security Part 2


Security Part 2

• Strong Passwords

• Up-to-date: WP, plugins, and themes

• Update Notifications

• Limit Login attempts

• WordPress Backup - Plugin or external


Manage Remotely

• WPRemote

• ManageWP

• JetPack/WordPress.com

http://WordPress.com


Backups

• Full backups

• Automated

• Off-site

• Restorable


Security Part 2

• Security plugins - not all are good

• Web Application Firewall

• Extending Fail2Ban

• External WAF


Other Stuff…


Other Stuff…• Site monitoring

• Email

• Performance testing

• Cron

• Backups

• Control Panel

• sFTP


Site Monitoring

• Status Cake

• Uptime Robot

• Pingdom


Site Monitoring


Site Monitoring - Munin


Email

• External - Use a ‘big’ provider

• SPF - Sender Policy Framework

• DKIM - DomainKeys Identified Mail

• Outgoing only


Performance Testing


Other Stuff…

• Cron — (not WordPress)

• Backups — (not a plugin)

• sFTP — secure and restricted (chroot)


Control Panel

• Not cPanel or Plesk

• Webmin — Open source


Links• https://www.vultr.com/

• https://www.digitalocean.com/

• http://www.ubuntu.com/

• https://rtcamp.com/easyengine/

• http://www.fail2ban.org/

• https://sucuri.net/

• https://wpremote.com/

• http://munin-monitoring.org/

• https://www.statuscake.com/

• https://uptimerobot.com/

• http://www.dkim.org/

• https://www.blitz.io/

https://www.vultr.com/

https://www.digitalocean.com/

http://www.ubuntu.com/

https://rtcamp.com/easyengine/

http://www.fail2ban.org/

https://sucuri.net/

https://wpremote.com/

http://munin-monitoring.org/

https://www.statuscake.com/

https://uptimerobot.com/

http://www.dkim.org/

https://www.blitz.io/


Links • https://wordpress.org/plugins/wp-simple-firewall/

• https://wordpress.org/plugins/limit-login-attempts/

• https://wordpress.org/plugins/backupwordpress/

• http://www.webmin.com/

• https://www.gandi.net/

• https://pointhq.com/

• http://www.rsync.net/

https://wordpress.org/plugins/wp-simple-firewall/

https://wordpress.org/plugins/limit-login-attempts/

https://wordpress.org/plugins/backupwordpress/

http://www.webmin.com/

https://www.gandi.net/

https://pointhq.com/

http://www.rsync.net/


Questions?

• Mike Little

• @mikelittlezed1

• https://mikelittle.org

• https://wp-hosting.co.uk

https://mikelittle.org

https://wp-hosting.co.uk

VPS Hosting for Speed and Security

Internet

Transcript of VPS Hosting for Speed and Security