Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

What's your personal flavour in isolating a multiuser PHP environment?

Greetings folks,

I'm curious what tricks you've got up your sleeves for isolating users in a PHP multi-user environment. Mod_Ruid? SuExec? suPHP? PHP-FPM?

Care to share your personal configuration preference? Care a little more to reason for your choice?

Comments

  • My choice is Php-fpm. Simply because it is system component and the pool separate users well. Only that separate pool consumes more memory.

    Thanked by 1Blanoz
  • jarjar Top Host, Host Rep, Veteran
    edited October 2014

    For easy configuration I usually go mpm-itk. It's basically prefork in terms of performance but if you toss varnish or nginx in front of it, it doesn't hurt so bad. On a cPanel box I'll obviously go suPHP but setting up suPHP on your own is just not what I call a good time.

    Thanked by 2Blanoz vRozenSch00n
  • BlanozBlanoz Member
    edited October 2014

    @Jar said:
    For easy configuration I usually go mpm-itk. It's basically prefork in terms of performance but if you toss varnish or nginx in front of it, it doesn't hurt so bad. On a cPanel box I'll obviously go suPHP but setting up suPHP on your own is just not what I call a good time.

    Hmmm never thought of mpm-itk. Will give it a spin.

  • Kloxo-MR have php-type like mod_php_ruid2, mod_php_itk, suphp_prefork, suphp_worker, suphp_event, php-fpm_worker, php-fpm_event, fcgid_worker and fcgid_event for apache.

  • I'll second the vote for mpm-itk. Careful if you try RHEL/CentOS 7 because it's broken and requires a few hoops to get it working. Works fine on 6.x though. I've been using ITK since my Mandrake days.

    Thanked by 1Blanoz
  • @Jar said:
    ... mpm-itk...

    this. performs quite well for not so big shared hosting and is easy to setup.

    for large scale go with mpm-worker+mod_fcgid/suexec, but it can be more pain to setup ;-)

    Thanked by 1Blanoz
  • +1 for mpm-itk

  • I'm using mod_ruid2

    Thanked by 1Blanoz
  • BlanozBlanoz Member
    edited October 2014

    @vRozenSch00n said:
    I'm using mod_ruid2

    What have you used before? Curious if you noticed any performance penalty with ruid2.

  • mpm-itk and suPHP. mod_ruid2 is slightly faster in some cases, but still maintaining containment.

    On some servers I use the mpm-itk + varnish or mod_ruid2 + varnish

  • CloudLinux last time I played with it (1-2 years ago) could do this

  • Try uWSGI with namespaces isolation.

  • On some of my servers Cloud Linux on others Mod_Ruid2 + Apache jails enabled in cPanel

    @Blanoz actually you can achieve slightly better results than php-fpm (for apache)

  • @mustafaramadhan said:
    Kloxo-MR have php-type like mod_php_ruid2, mod_php_itk, suphp_prefork, suphp_worker, suphp_event, php-fpm_worker, php-fpm_event, fcgid_worker and fcgid_event for apache.

    Its only php-fpm for nginx?

  • @linuxthefish,

    Except for Apache, other webservers only with php-fpm.

Sign In or Register to comment.