Live data from Hacker News

I don't need a VPS anymore

greenash.net.au

131–140 of 197 posts

Re: I don't need a VPS anymore

#131

>The number one thing that I loathed about managing my own VPS, was security. A fully-fledged Linux instance, exposed to the public Internet 24/7, is a big responsibility. I don't share the view, if we consider small web sites or apps. For me, using containerized apps, having external backups of the DB, means I can reboot the app fast in a clean state if an attacker manages to break in and do nasty things. The OS and…

> For me, using containerized apps, having external backups of the DB, means I can reboot the app fast in a clean state

That of course applies if the attacker only makes it into the containerized app itself, but (assuming docker is used for containerization) Docker has had it's share of 10.0 CVEs [1], and almost every other containerization platform out there has as well. Can you really trust a machine once it has been broken into ?

Then of course there's the whole thing about the data. Nobody cares about the application or the infrastructure. If a sysadm is running the show, chances are that the server will be sitting on a DMZ network with firewall rules in place, so hopefully the network integrity is still in place. Your data however may not be, so you need backups.

Depending on how you do backups, chances are that you're using push backups, which means that somewhere on your server resides credentials that can at least alter your backup, meaning if an attacker makes it into your server neither your data or backups are safe.

> Apart from some limited cases, I think it's cheaper to have your own servers if you don't have to pay much for their administration.

If all you're hosting is small web sites or apps, some of the major cloud providers has your back for free. Azure allows 10 million hits on their Azure functions per month for free, as well as free static websites. Oracle Cloud gives you 4 ARM cores and 24GB RAM for free to use in any configuration from a 4 core VPS to 4 one core VPS', as well as a lot of other stuff including 50 IPSec connections.

There is literally no reason to run and expose any infrastructure from home anymore, especially not if it's "personal infrastructure".

> And I hate not owning my data, my apps, having to depend on a third party.

Define owning. Your data might live on a server, but if you create backups at home or somewhere else, does that not constitute ownership of the data ?

As for depending on a third party, i'd wager that your data is much safer in a professional data center with redundant internet connections, redundant power supplies, redundant hardware, geographical redundancy, fire/flood protection, physical security and 24/7 monitoring than any setup you might have made at home, or if not, you're paying way more than you need to for your home setup.

[1] https://www.cvedetails.com/vulnerability-list.php?vendor_id=...

Re: I don't need a VPS anymore

#132
post #53

Earlier quoted context omitted.

The post recommends SaaS / IaaS in place of VPS. "It's 2022, and I'm here to tell you, that deploying stuff online purely using SaaS / IaaS offerings is an option, and it's often the quickest, the cheapest, and the best-quality option (although can't you only ever pick two of those? hahaha), and it quite possibly should be your go-to option."

For me, the solution is Cloudflare + (pick 2) random cloud providers + a sanity check for failover or bypass of Cloudflare if something really messes up. I run a custom stack on 90% of my sites, so it isn't feasible to use SaaS / IaaS.

What's your stack?

Re: I don't need a VPS anymore

#133
post #81

Earlier quoted context omitted.

There will always be sysadmins in the same way there will always be Fortran programmers. There are benefits to the old way of doing things, but those benefits are of shrinking relevance.

Who do you think runs the cloud you run on? (Hint: sysadmins)

We call that "abstraction" and "layers". And yes, layers leak, but we still use layers.

Those sysadmins are by and large someone else's problem now :-p

Re: I don't need a VPS anymore

#134
post #127
post #120

In case you still find yourself needing more than netlify can offer, you can get a pretty decent free VPS from Oracle: https://paul.totterman.name/posts/free-clouds/ . Just remember to make backups.

That... sounds a bit too good to be true? But maybe it is true? Have you been using it? Are there any surprise costs (traffic etc)? Please tell more!

They’re free tier is very good and generous. They have (or perhaps had) a fondness of killing peoples free accounts though so take care what you put on there

Re: I don't need a VPS anymore

#135
post #41
post #22

I see it like this : Once there were a lot of free tera byte image hosting services. And then after some market ups and downs, most of them either closed down, asked for subscription fee or hugely restricted what can be done. Free static hosting services might not remain such for long. At the very least, they might introduce terms or condition you might not like. Then it will be harder for you to shift to another ser…

> Then it will be harder for you to shift to another service, compared to switching your VPS server. No way. I can move a folder of files to anywhere quite confidently. Even a VPS. But I have no idea what I would do if I needed to move my VPS. I’d probably have to start over from scratch.

If your VPS was build by hand over a long period of time, sure it's hard to switch to another service. If your VPS setup is automated by Ansible or NixOS or something, it ceases to be hard.

Re: I don't need a VPS anymore

#136
post #89

For most things we want to do there's more than one way to do it. Ultimately it comes down to having freedom to try different things, to experiment with web technologies as my interests evolve. I really really dislike having to bend to unnecessary restrictions. I don't think I'm alone in that regard. A VPS is a great way to go. IMO managing a VPS is hardly burdensome, the amount of effort it requires is minuscule. Ce…

Are you using Jitsi via Docker? I was self-hosting a Jitsi instance for a while for my friends, but among all the services I'm hosting, it required the most work and broke all the time. At some point I gave up and we're now using either Signal or, if Signal can't do what we need, some public Jitsi instance that we trust.

Re: I don't need a VPS anymore

#137
post #125

Earlier quoted context omitted.

> [..] If someone identifies as a sysadmin and can't write Python/Perl/Go/Ruby [..] this is the difference between a systems admin and a systems engineer. some folk can't make the jump from sysadmin, despite best intentions and training.

It is a common (new) myth that sysadmins didn’t code. There were some IT technicians who couldn’t code and some operations staff who couldn’t code (and would proudly claim this, for some reason). But tools like ansible, salt, chef and terraform were written by sysadmins. In fact a lot of non-feature code in my companies such as database fencing programs and automated blue/green rollouts has been written by sysadmins.…

Some sysadmins could code. Not all sysadmins can code.

Re: I don't need a VPS anymore

#138
It's not really more power in hands of corporate overlords unless you give them your domains. Domain names are the first point of contact to anyone using your service, as long as you control them you can move to any other corporate overlord at any time. That's freedom.

I'm in the same situation as the OP. Except I still do have some VPS left mainly for tor exit nodes and DNS over TLS servers. The rest that did require some sort of VPS is now in managed k8s.

Re: I don't need a VPS anymore

#140
post #127
post #120

In case you still find yourself needing more than netlify can offer, you can get a pretty decent free VPS from Oracle: https://paul.totterman.name/posts/free-clouds/ . Just remember to make backups.

That... sounds a bit too good to be true? But maybe it is true? Have you been using it? Are there any surprise costs (traffic etc)? Please tell more!

The one surprise I've run into was that they shut down the arm instances at the end of the trial credits period, even if the arm instances are "always free". So I had to recreate them from the block device backups. But that hasn't re-occured.
Post reply on HN