Hosting providers infrastructure around Wordpress and other platforms.

1. Backstage
Pedro Dias
petermdias@gmail.com
@pedromdias
http://pedromadias.wordpress.com

2. Who am i?
Petrol-head in the weekends
Lecturer at Polytechnic of Tomar
System Engineer at Ptisp.pt
Independent consultant/advisor
Geek without vacations in the last 12 years

3. System engineer?

4. Numbers
~2800 wordpress’s
~550 drupal’s
~4700 joomla’s
~280 moodle’s
50 hosting servers
~6000 .PT domains
~7000 other TLD domains

5. App Security
A nightmare...
Each account is a black box to the provider
Core updates?
Modules/plugins updates?
Backups are your best friend and enemy
simultaneously

6. Damage control/prevention
Manual verification
Logistic problem
Security tools automation
wpscan
joomscan
maldet
...

7. Workflow
Customer sends an email requesting scan
Email is processed
Scan request is sent to the account’s target server
Account gets scanned
Report is sent to the customer and administrators

8. Monitorization

9. Typical LAMP stack
Application
PHP
Apache mySQL
Linux

10. Improving a little
Application
PHP Caching (APC,
Apache mySQL memcached, ...)
Linux

11. Swapping stack - LEMP
Application
PHP-FPM
nginx mySQL
Linux

12. Lets scale
Application
PHP-FPM
mySQL
NGINX
Linux
Linux VM 0
VM 1

13. Scale!
Loadbalancer
Application Application
PHP-FPM PHP-FPM
NGINX NGINX
Linux Linux
...
VM 1 VM 2
mySQL
Linux
VM 0 ...

14. Cloud
Autoscale
Scale cluster creating more nodes
Needs a template node
Scale each node
Redundancy
Equally distribute nodes over all the hypervisors

15. Cloud architecture

16. IaaS
Platforms
Onapp
Openstack
Cloudstack
Product
Amazon EC2
Google Compute