Slashdot Mirror
Things To Look For In a Web Hosting Company?
v1x writes "I have had an account with my current web hosting company for a few years, with 3 domains being hosted there (using Linux/PHP/MySQL). Recently, all three of these websites stopped functioning, and upon checking the site, all my directory structures were intact, whereas all of the files were gone. Upon contacting their technical support, I was given the run-around, and later informed by one of their administrators that none of the files could be restored. Needless to say that I am looking for a different web hosting company at this point, but I would like to make a more informed choice than I did with the current company. I have read a similar Slashdot article (from 2005) on the topic, but the questions posed there were slightly different."
Reader mrstrano has a similar question: "I am developing a web application and, after registering the domain, I am now looking for a suitable web hosting provider.
It should be cheap enough so I can start small, but should allow me to scale up if the web site is successful (as I hope).
The idea is simple enough so I do not need other investors to implement it. This also means that I don't have a lot of money to put on it
at the moment.
Users of the website will post their pictures (no, it's not going to be a porn website), so scalability might be an issue even with a moderately high
number of users.
I would like to find a good web hosting provider from day one, so I don't have to go through the pain of a data migration.
Which web host would you choose?"
Do they use Linux only? I only want Linux hosting, and mixed providers are always trying to push you over into Windows hosting because they're being incentivized to do so. I've been around and don't need to hear that pitch again.
Effectively unlimited domains, bandwidth, storage and MySql databases, email accounts, FTP accounts - multiple user accounts I can lock down to one domain or folder for these because I might want to job out management for a domain or subdomain. Because I never know today what I'm going to be using it for, and this is a long term relationship that's challenging to get out of.
Cheap domains - under $15 a year. As many as you want on one hosting account, because I collect them as a hobby.
PHP, Perl and Python of course.
Ease of migration away. I figure if there's a button on their interface to release my domains to another registrar they'll try and keep me with good service rather than difficult migration.
Reasonable policies about certificates and dedicated IP addresses. Because I might want to open a store.
Reasonably easy and flexible setup of web apps, because I might want to run a package. Self-help configuration because I'm always fiddling with things after business hours.
I like BlueHost. No, I don't work for them but they've been making me happy for quite a while.
Help stamp out iliturcy.
You're going to run a *chan site..
100X better than simply web hosting... Linode
I've had great luck with http://nearlyfreespeech.net/ - they're security-conscious, anti-spam, pay-only-for-what-you-use, and I like their political pro-privacy and pro-free speech stance. I have a feeling most of the people here at Slashdot would be very comfortable with them. They run FBSD, not Linux, but it's really not that huge a difference for web development.
Make sure you read the caveats about what will and won't work with their service. Things like Django and RoR won't really work because of the need for a persistent process, and they don't yet have support for cron jobs (but they're working on it - it's difficult because of the way they're set up). OTOH, MVC frameworks for PHP like CodeIgniter will work just fine, and they've got Catalyst installed for Perl coders. They do make it very clear about what they do and don't support, though.
I claim first use of "Error No. 0B" - or "No. 0B error." It'll be the new ID 10T!
It probably doesn't apply to either of your projects, but if you're starting from scratch, Google App Engine might be a good candidate. Advantages: Starts out free, and it's by Google, so yes, it scales. When you have to start paying, it's pay-as-you-go like Amazon, but only for the cycles you actually use, since it's an entirely managed solution.
Like I said -- probably doesn't apply. It won't run PHP (that I know of), and mrstrano didn't specify what his shiny new app is being developed in. But if it's early enough, and if you're willing to trust Google...
Don't thank God, thank a doctor!
LowEndBox is a great website that compares low-end virtual private server providers.
I have had a good experience with DreamHost. Their support is snappy and helpful, and the people who work there seem generally kind. They have a fine set of dreamhost-specific howtos maintained on their wiki, and a powerful but easy to use panel for administration.
They run linux boxes with the full complement of command line tools (with compilers and everything!), and the only restriction is no persistent processes. If you want to do that, you can buy their pricier private server option which gives you your own private server instance.
They have some great terms of use (as far as storage and bandwidth are concerned), and their prices are reasonable. I got a great deal a while back on two years of hosting, and now I'm hooked on the service.
Hoo boy, the stories I could tell. Actually, I can't, because the hosting provider threatened to sue us if we named them publicly.
OK, first, if there's more than a couple of servers involved, and your business depends on it, use two or more different providers. If you only have one provider, it puts them in a position to screw you. When we terminated our relationship with our provider, they held our data hostage until we paid them an additional $15,000 to put our servers on line again long enough for us to copy our data.
Which brings us to: DO YOUR OWN BACKUPS. Service providers either don't do them, or they don't do them right. The world is full of horror stories of customers paying the data center extra for backups, and then finding the backups were never actually done. And even if they do do backups, they maintain control of them, which puts them in a good position to extort you.
Remember, the practice of holding your data hostage goes back a long way. Happened to my father's company back in the 70's mainframe days. It still happens.
Most important of all: have a professional go over your data center contract with a fine-tooth comb. The default contract they'll give you (or at least the one they gave us) is highly abusive.
For instance: if you don't explicitly terminate a contract at the end of its period, it's automatically renewed for another 18 months. You need to give 2 months notice before the end of the term before canceling. There is no early termination. If you so much as upgrade a single disk drive, the contract is automatically renewed for another 18 months.
Here's a doozy: our contract specified that if a server went down, they would either fix or replace it within two hours of determining the problem. The catch: they merely have to say that they haven't determined the problem yet, and then they don't have to replace anything. Our main server was kept off-line for a month this way.
No matter which provider you choose, never depend on them for backups. Keep your originals locally and copy them to the webserver. Rsync is a great, effortless tool for this kind of synchronization. If you're maintaining SQL databases on the webserver, back them up at least daily with cron and download the backups. A few simple scripts will work wonders for your protection and your sanity.
I like slicehost for a number of reasons, but you have to be willing to use a command line because there is no GUI unless you install one (because you're getting a virtual server with full root access).
Though they do not offer cpanel or anything like that, they do have a minimal admin panel that you can use to configure DNS, MX and set up your server (as well as automate backups, which start at like 5 a month or so).
For 20 a month, you get a 256mb ram virtual slice and around a dozen linux distros you can select from with their admin panel for the slice. If you dont like any of the ones they provide (very unlikely) you can opt to install your own with a set of directions they provide on their wiki (the wiki is also very helpful when setting up your server for whatever you might want to do).
Whenever I need help with a server issue, they email fairly quick (same day) or they have a chat room with people who actually speak English as their first language (or know it well enough you would assume they do). Generally, the people helping you are the same ones who maintain their website or their servers as well, not outsourced help.
Some dont like that they dont have any sort of guaranteed uptime, but eh, I've never really had any servers I have go down for more than an hour or so and it's generally sometime at night if they do. The downtime is generally planned or even if its an emergency, they notify with enough time you can migrate files to another server.
For 20 a month and the freedom of having full server access to install what you want, I'd gladly pay. I still loath when I have some clients who only want to pay 3-5 or whatever a month at some lame shared hosting site and have to deal with cpanel or whatever else, because once you've used the command line and had full control on a remote server it's hard to go back to the panel interface, lol.
I was a system admin for a while at a web hosting company, though I left in December for another company in a different sector. Quite frankly, the experience of the OP isn't that unusual. Hell, some of people on my team would accidentally nuke fully-dedicated servers and then tell the customer that it was "russian hackers" or a "raid failure" instead of just owning up to it. More often than not, I was the one getting stuck taking the call and trying to make things right, which is one of the reasons I got out of there.
We all know shit happens, and accidents can occur. That doesn't excuse not owning up to it when they do. In the case of the russian hacker excuse, the admin who came up with that gem tried to tell the senior admin that's what happened, too. When he found out that he was lied to, he pretty much went ballistic.
That said, check the following stuff:
1) if they are advertising "unlimited bandwidth," what's the actual throughput that they're allowing -- especially if they phrase the actual offer as "unlimited data transfer." Bandwidth usage is tied to memory usage, especially in the monitoring tools that come on cPanel-enabled servers, and so if you're pushing a lot of data it can spike your memory usage and
2) if they'd advertising "unlimited disk space," what are the limits at which their backups stop, if any? whats the amount of disk space? if you're doing shared hosting, which hopefully you're not, then that affects whether or not your account ends up getting moved, at least where I worked, a lot of the job on overnight rotations was moving accounts for disk space management.
3) what are their resource policies? On shared servers, we'd kick people for using more than 1% of CPU, generally. On a VPS, it could get a little higher.
4) if you're looking for a VPS, check what platform they're using for hosting, whether its Xen, VZ, etc. VZ doesn't track memory internal to the container, or really allow for swap space, etc. So, if you were buying a 256M plan from us, you'd really get 1024M memory segmentation which was the "burstable," but memcached would leak out and suck up RAM from the whole server if it weren't installed right (and a lot of people in my department didn't know this or didn't care). If you plan on using something like memcached, you'll want a hardware dedicated server, or a sufficiently large Xen container.
5) super-double check backup policy. We wouldn't back up dedicated servers, for instance. Backups could be configured to push to our array for a fee, or we could turn on local cpanel backups on the server, but if the disks really did go bad then you'd still be fucked if you weren't snapping copies back to yourself via FTP and keeping them local. If you're looking for a VPS or shared hosting, then make sure you know the backup rules -- how much data, and how it gets backed up. For instance, our setup used rsync over an NFS mount, which meant that we'd have a copy of the latest of everything that was there when the backup ran, but if something was corrupted before the backup, we'd have a backup of a broken file.
Some recommendations of companies other than the one I worked for, which I've used for various things and liked well enough are Slicehost and RootBSD. They're both Xen-based, allow a really high level of autonomy, etc. Slicehost pretty much lets you do everything yourself. You can go from no server to vps with root in about 5 minutes with no human interaction. RootBSD takes a bit longer to get set up, but their support people were always really helpful to me, and the added benefit of not being Linux-based, but using FreeBSD though OpenBSD is also a custom option as well.
I'm a random slashdot poster and just an fyi.
Your whole post was pretty much void after you linked your referral link. The fact that _you_ get benefits from people signing up makes me think your review might be biased.
I mean, if you don't sell me on their service, I'm not going to give you your referral bonus.
Simple point, if you really want people to trust your review, don't post your referral links.
Again, that was just my opinion on your post, I'm not saying you're wrong.
The one company that I recommend to everyone when it comes to shared hosting is ICDSOFT.com It will be extremely hard for you to find a bad review on the Internet, simply because their service is impecable...
I've used them for a year until I switched to a dedicated server and each time I had a question their tech support answered within 5 minutes with precise answers.
The main think about them is that they're not oversold - each account can hold only one website, you get only about 100-500 GB of bandwidth, 10-50 GB of disk space and several databases and free webmail/pop3/smtp with limited number of email accounts, and each server had their own RAID 5 setup. When I had the website hosted there my server had about 120 websites hosted on it.
This is actually great especially when you start your website as you'll know the server won't be overloaded, you won't have 10.000 websites on the server with all files being retrieved from a NAS (as Dreamhost does) and you won't have the accounts of 400-1000 people who abuse the "unlimited bandwidth and space" feature and stream music to their office from the hosting account or basically people that have Youtube clones on shared hosting accounts (as it happens on Dreamhost)
Most people when they see they get only a few hundred GB of bandwidth they go on looking for hosting companies with unlimited bandwidth, but in reality for a startup website on a sharing account even 100 GB of bandwidth is enough. If your website becomes popular enough to go over 100 GB of bandwidth used, you'll afford to get a 60$ a month server with 2 TB of bandwidth and 200 GB of disk space.
I've also used Dreamhost.com and Site5.com for a while, between ICDSoft and my own dedicated server, mainly because it was a good deal - used coupons to get one year for something like 10$. Site5.com was just slow, the control panel sucked....
Dreamhost was slowish, overloaded (the server I was on had about 12000 websites on it), the quality of the websites is lower (blogs which are not optimized therefore abusing PHP and MySQL servers) and the NAS where this web server was retrieving from was shared between about 5-6 web servers so you can imagine a 1gbps link from a NAS was used by about 100.000 websites. Also, their servers and hardware have issues all the time - there's no single day where one of their NAS would not crash, or one of their websites would die or the email server shared between 20-30 web servers would fail and so on... you can check dreamhoststatus.com to see how often they fail.
So many buzzwords. What's wrong with just putting up a Geocities page like everyone else?
UTF-8: There and Back Again
1) Failures will happen. Design for them. Have at least two hosts, in significantly different physical locations. If a host gets hacked, if their backups were silently failing, if they go out of business without warning like RedONE did, if they get hit by natural disaster, et cetera; there just isn't anything you can do to isolate from that. Redundancy is key.
2) Ask hosts about their backup policy and strategy, as well as their redundant disk setup, before you get started. It's not a perfect answer, but it gives you a decent sense of how on the ball they are - if they're spending for the extra disk space, then they're probably not cheaping out other places either.
3) A week or two in, request a backup restore. You don't have to make up a failure or anything; just say you've had problems with hosts lying about backups in the past, and you want to make sure you're on good ground. Make some changes to your setup beforehand every 10 minutes on a cron, so you know how old the backup is when it's restored.
4) Ask about gotcha policies like how they handle over-bandwidth (free day, shutoff, charge per unit, etc) and so forth. That'll give you a sense of how they'll behave if/when problems happen.
5) Expect problems to happen. The engineering overhead of replication isn't that big these days, and the cost of not having it is immense. Furthermore, in addition to replication, which secures against failure, also have backup, which secures against attack. Backup can be by FTP to one of those cheapo shared hosts that don't care about disk space, but it needs to be at a distinct third location.
Basically, don't try to find a host that won't have problems. You'll find Santa Claus sooner. Parts fail, people make errors, people do shady things, attacks are made, natural disasters and backhoes happen, et cetera.
Just have a contingency plan in place. If you can handle a failure, it's no longer a critical problem. It's usually cheaper to have three normal hosts than one super duper bullet proof host. Leverage economy. The internet is designed for handling the failure of cheap parts through massive redundancy.
Leverage that. It's the smartest thing in network history.
StoneCypher is Full of BS
I've had great luck with Dreamhost after I switched to them from 1 and 1 (god they sucked)
Dreamhost is based in Southern California and even better, their tech support is based in Southern California. They're also an employee owned company.
They offer a pretty wide range of services from shared hosting on up to your own servers. Their tech support is fantastic... once when I had a problem with my shared hosting account, their tech support person emailed me back about the problem BEFORE I received the automated "someone from tech support will get back to you as soon as possible" email. (the automated email came about 15 minutes after I submitted the ticket.)
Web hosting that doesn't suck!Dreamhost
Nearlyfreespeech is not for everybody. I used to recommend them, but not anymore.
Here are the advantages:
* low cost, especially for tiny sites
* SSH included, no bullshit regarding that
Disadvantages:
* php and mysql performance is very slow. the servers are overloaded
* ssh is very slow. there is lag between every command. This is especially noticeable when using sshfs
* sometimes there is lag for simple page loads
* no cron, no https, several little things you may have come to expect from a host are not provided by NFSN
* reliability: a couple of times a year, NFSN will make some arbitrary change that may cause your sites to go down. The first time, the permissions on all of my files changed in such a way that the web server could not access them, and I had to manually change them back. The last time, symlinks stopped working, and I had to find every one, delete it, and recreate it.
* reliability: I don't think NFSN even has 2 9's. (ie less than 99% uptime). When NFSN is down, they still charge you for storage, but not bandwidth. This is fine for them, but might not be for you.
* NFSN is a one-man LLC, named Jeffrey Wheelhouse. If you ever need to deal with support, you will notice that this guy is a self-righteous asshole. Just look at the forums, and his responses. I wouldn't usually consider this a problem, but because NFSN is so buggy, you will have to deal with this man eventually.
Shared hosting is like like living in a small house with fifty strangers. All of you have a job that requires you to go in and out all the time. And there is only one door.
Go for a cheap dedicated and unmanaged server and carefully manage your own backups. Watch out for 95% billing if you have any real traffic needs. Look for reviews in forums like webhostingtalk, not review sites. As recommended by an earlier commenter, look at the nameservers and make sure you are buying from the actual provider and not a reseller. Look at the upstream providers of your selected server provider, tier-1 ISPs are good, as well as lots of bandwidth between your chosen ISP and the internet, and a good SLA. Avoid "shared 100mbps". Look for extra costs you may have to pay before actually making a contract - For example, many providers will charge ridiculous amounts of money for extra IP addresses or extra domains in some stupid exclusive control panel (*cough*Plesk*cough*). A good domain name registrar is name.com. A bad domain name registrar is godaddy. Buying your domain name from your server host is unthinkably stupid.
Long story short - If the data is critical - trust no-one - use multiple different sources which you control for the data!
That wasn't a review in some non-biased comparison between multiple hosts. It's my biased opinion.
I'm not a professional critic trying to be as non-biased as possible. I rather like Webfaction and think it's worth a shot. If you shared something really cool that I ended up purchasing, I wouldn't hesitate to give you credit. That's what the whole referral business is for.
A snake-oil thing to do would be if I tried to trick people into clicking the link. Instead, I offered the referral option AFTER posting a direct link to their site.
"I mean, if you don't sell me on their service, I'm not going to give you your referral bonus." Exactly, hence my disclaimer "If you DO decide to join, don't be afraid to use me as your referrer." Besides, I believe the bonus is only for those who register an account. Clicking does nothing for me.
Anyway, thanks for your honesty!
If all else fails, add another if.
You get what you pay for. If you want total control, man up and take it! Get a VPS from Linode or Slicehost and configure the server exactly how you want. They offer similar service for similar prices. To get you started, Linode has a LAMP StackScript available that can have you up and running in about 2 minutes. From there, configure Apache for multiple vhosts and you're all set.
The downside is that ultimately, yo're responsible. The upside is that they don't touch your stuff and are expandable nearly instantly
I DEFINITELY recommend linode.com which gives you root and your own distro. They have kept expanding your hard disk etc. for free periodically for years, and keep developing new things for its users. You ssh in and can install anything you want, and can organize disk images, reboots and dns from dashboard.
However you wouldn't want to host a simple very high volume site there, so I have hostgator as well. I haven't pushed it, but their baby account seems quite good. It is the opposite of linode, being high capacity and lower functionality but even then it has quite a lot of good stuff. Cpanel based but with ssh too.